https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 10:48:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349615 EUVD-2026-349615 https://cve.radiocsirt.org/vuln/euvd-2026-349615 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71202 <p>The raster Rust crate&#39;s crop function (src/editor.rs) clamps the crop width/height against source dimensions but only clamps the offset_x/offset_y parameters against 0, never against the source width/height.</p> <p>The raster Rust crate&#39;s crop function (src/editor.rs) clamps the crop width/height against source dimensions but only clamps the offset_x/offset_y parameters against 0, never against the source width/height.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-71202 https://cve.radiocsirt.org/vuln/ghsa-hjwh-6x9j-wjwq <p>The raster Rust crate&#39;s crop() function (src/editor.rs) clamps the crop width/height against source dimensions but only clamps the offset_x/offset_y parameters against 0, never against the source width/height. When an offset exceeds the corresponding source dimension, `width2 - offset_x` (or the height equivalent) underflows to a negative i32, which release builds do not trap; the negative value is then cast to usize inside Image::blank()&#39;s Vec::with_capacity() call, triggering a capacity-overflow panic and crashing the process on a single crafted crop request.</p> <p>The raster Rust crate&#39;s crop() function (src/editor.rs) clamps the crop width/height against source dimensions but only clamps the offset_x/offset_y parameters against 0, never against the source width/height. When an offset exceeds the corresponding source dimension, `width2 - offset_x` (or the height equivalent) underflows to a negative i32, which release builds do not trap; the negative value is then cast to usize inside Image::blank()&#39;s Vec::with_capacity() call, triggering a capacity-overflow panic and crashing the process on a single crafted crop request.</p> https://cve.radiocsirt.org/vuln/ghsa-hjwh-6x9j-wjwq