{"id":"CVE-2025-59047","aliases":["RUSTSEC-2025-0065","GHSA-qhj8-q5r6-8q6j","RUSTSEC-2025-0000"],"title":"matrix-sdk-base: Panic in the `RoomMember::normalized_power_level()` method","summary":"matrix-sdk-base: Panic in the `RoomMember::normalized_power_level()` method","severity":"none","vendor":"matrix-sdk-base","product":"matrix-sdk-base","ecosystem":"rust","affected":["matrix-sdk-base >= 0.0.0-0, < 0.14.1"],"patched":["matrix-sdk-base 0.14.1"],"published":"2025-09-11","updated":"2026-10-12","sourceUpdated":"2026-10-12T18:00:10.959444296Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2025-0065","references":[{"url":"https://crates.io/crates/matrix-sdk-base"},{"url":"https://rustsec.org/advisories/RUSTSEC-2025-0065.html"},{"url":"https://github.com/matrix-org/matrix-rust-sdk/pull/5635"}],"tags":["osv","rust"],"epss":0.00401,"epssPercentile":0.32477,"ingestedAt":"2026-10-13T11:45:30.179Z","slug":"CVE-2025-59047","body":"## Overview\n\nIn matrix-sdk-base before 0.14.1, calling the\n`RoomMember::normalized_power_level()` method can cause a panic if a room member\nhas a power level of `Int::Min`.\n\n## Affected packages\n\n- `matrix-sdk-base >= 0.0.0-0, < 0.14.1`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `matrix-sdk-base 0.14.1`","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}