Low severity · published Sep 11, 2025
CVE-2025-59047
matrix-sdk-base has panic in the `RoomMember::normalized_power_level()` method
2.7
CVSS
0.4%
EPSS
No
On KEV
Description
matrix-sdk-base is the base component to build a Matrix client library. In matrix-sdk-base before 0.14.1, calling the `RoomMember::normalized_power_level()` method can cause a panic if a room member has a power level of `Int::Min`. The issue is fixed in matrix-sdk-base 0.14.1. The affected method isn’t used internally, so avoiding calling `RoomMember::normalized_power_level()` prevents the panic.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
matrix-rust-sdk · matrix-org
< 0.14.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-59047
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-59047
github.com
https://github.com/matrix-org/matrix-rust-sdk/commit/ce3b67f801446387972ff120e907ca828a9f1207
github.com
https://github.com/matrix-org/matrix-rust-sdk/pull/5635
github.com
https://github.com/matrix-org/matrix-rust-sdk/releases/tag/matrix-sdk-base-0.14.1
github.com
https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-qhj8-q5r6-8q6j
More from matrix-rust-sdk
7.5
CVE-2025-66622
matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values
7.5
CVE-2022-39252
When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder
6.9
CVE-2026-45056
Matrix Rust SDK: Sender-binding gaps in to-device and room-key attribution
5.2
CVE-2025-53549
Matrix Rust SDK allows SQL injection in the EventCache implementation
4.9
CVE-2025-48937
matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator