CVE-2019-25002

CVE-2019-25002 is a critical vulnerability affecting the sodiumoxide crate before version 0.2.5 for Rust, specifically within its generichash::Digest::eq function, which improperly compares itself to itself, leading to degenerate security properties. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity, potentially resulting in complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low immediate threat despite its high severity.