CVE-2023-42444
phonenumber: panic on parsing crafted RF3966 phonenumber inputs
Published Sep 19, 2023 · updated Oct 13, 2026
### Impact The phonenumber parsing code may panic due to a panic-guarded out-of-bounds access on the phonenumber string. In a typical deployment of , this may get triggered by feeding a maliciously crafted phonenumber over the network, specifically the string . ### Patches Patches will be published as version and backported as .
Timeline
Detection, updates, and resolution for this record.
Sep 19, 2023 · Catalog
Detected
### Impact The phonenumber parsing code may panic due to a panic-guarded out-of-bounds access on the phonenumber string. In a typical deployment of , this may get triggered by feeding a maliciously crafted phonenumber over the network, specifically the string . ### Patches Patches will be published as version and backported as .
Oct 13, 2026 · Catalog
Fix available
crates.io phonenumber 0.0.0-0 → 0.2.5
Oct 13, 2026 · Catalog
Updated
### Impact The phonenumber parsing code may panic due to a panic-guarded out-of-bounds access on the phonenumber string. In a typical deployment of , this may get triggered by feeding a maliciously crafted phonenumber over the network, specifically the string . ### Patches Patches will be published as version and backported as .
Affected
- crates.io phonenumber0.0.0-0 → 0.2.5
Sources
- CVE.orgCVE-2023-42444
Official CVE identifier
cve.org - FIRST EPSSCVE-2023-42444
30-day exploitation probability 0.9%
first.org - GitHub Advisory DatabaseGHSA-whhr-7f2w-qqj2
GitHub Advisory Database record mirrored by OSV.
github.com - OSV.devRUSTSEC-2023-0082
phonenumber: panic on parsing crafted RF3966 phonenumber inputs
osv.dev