CVE-2025-59047: 
Rust Analisi e mitigazione delle vulnerabilità

CVE-2025-59047 is a security vulnerability discovered in the matrix-sdk-base library affecting versions prior to 0.14.1. The vulnerability involves a potential panic condition in the RoomMember::normalizedpowerlevel() method when a room member has a power level of Int::Min (GitHub Advisory).

The vulnerability exists in the RoomMember::normalizedpowerlevel() method implementation, which can trigger a panic under specific conditions when processing power levels at the integer minimum value. The issue has been assigned a Low severity rating, indicating limited impact on system security (GitHub Release).

The impact of this vulnerability is relatively limited, as it only affects systems that specifically call the RoomMember::normalizedpowerlevel() method. When triggered, it results in a panic condition that could potentially cause service disruption (GitHub Advisory).

The vulnerability has been patched in matrix-sdk-base version 0.14.1. For users unable to update immediately, the recommended workaround is to avoid calling the RoomMember::normalizedpowerlevel() method. The affected method is not used internally by the library, making this workaround viable (GitHub Advisory).