https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 09:56:06 +0000 https://cve.radiocsirt.org/vuln/ghsa-qg8r-f7x3-25f7 <p><strong>Affected:</strong> crates.io: imageproc</p> <p>A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered `NaN` cases improperly, causing them to succeed the check instead of failing it. The floating point coordinate is under caller control by passing a selected projection matrix.</p> <p>Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method.</p> <p>Using bicubic sampling can result in a read of a few bytes beyond an allocation.</p> <p>Other out-of-bounds reads may be possible.</p> <p><strong>Affected:</strong> crates.io: imageproc</p> <p>A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered `NaN` cases improperly, causing them to succeed the check instead of failing it. The floating point coordinate is under caller control by passing a selected projection matrix.</p> <p>Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method.</p> <p>Using bicubic sampling can result in a read of a few bytes beyond an allocation.</p> <p>Other out-of-bounds reads may be possible.</p> https://cve.radiocsirt.org/vuln/ghsa-qg8r-f7x3-25f7