How to fix CVE-2025-53359?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

CVE-2025-53359

EUVD-2025-19744 MEDIUM

Improper Check for Unusual or Exceptional Conditions (CWE-754)

2025-07-02 [email protected]

GHSA-3w94-vq2x-v5wr

Information Disclosure

6.9

CVSS 4.0

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 16, 2026 - 01:55 vuln.today

EUVD ID Assigned

Mar 16, 2026 - 01:55 euvd

EUVD-2025-19744

CVE Published

Jul 02, 2025 - 16:15 nvd

MEDIUM 6.9

DescriptionNVD

ethereum is a common ethereum structs for Rust. Prior to ethereum crate v0.18.0, signature malleability (according to EIP-2) was only checked for "legacy" transactions, but not for EIP-2930, EIP-1559 and EIP-7702 transactions. This is a specification deviation. The signature malleability itself is not a security issue and not as high of a risk if the ethereum crate is used on a single-implementation blockchain. This issue has been patched in version v0.18.0. A workaround for this issue involves manually checking transaction malleability outside of the crate, however upgrading is recommended.

AnalysisAI

A security vulnerability in ethereum (CVSS 6.9). Remediation should follow standard vulnerability management procedures.

Technical ContextAI

Vulnerability type not specified by vendor. Affects ethereum.

RemediationAI

Monitor vendor channels for patch availability.

CVE-2025-53359 vulnerability details – vuln.today

Back