crates.io fuser vulnerabilities

Latest crates.io fuser CVEs

Newest publication first

1. GHSA-cvmj-47v9-35m9 FUSE-Rust: Uninitalized memory read and leak caused by fuser crate

   Published 2025-09-15

   High·CVSS 8.2

   During the creation of a new libfuse session with fuse_session_new, the operation list was passed as NULL incorrectly. libfuse expects this argument to always point to list of operations. This caused uninitialized memory read and leaks in libfuse.so.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.