CVE-2023-53159

CVE-2023-53159 is a critical out-of-bounds read vulnerability affecting the sfackler openssl crate for Rust, specifically versions prior to 0.10.55, triggered by an empty string passed to X509VerifyParamRef::set_host. With a CVSS score of 9.1, this network-exploitable flaw requires no user interaction and could lead to high confidentiality and availability impacts. While there is no evidence of active exploitation, no public exploit code, and it's not on the KEV catalog, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.