imageproc
Activity
- Latest release
- 3mo ago
- Total releases
- 36
- Cadence
- ~2 months
- Last 12 months
- 7
Details
- License
- MIT
- First release
- Jan 10, 2016
| Version | Released | |
|---|---|---|
0.27.0
unknown
|
0.27.0
unknown
Dependencies (16)
+ 8 more |
|
0.26.2
unknown
|
0.26.2
unknown
Dependencies (16)
+ 8 more |
|
0.25.1
unknown
|
0.25.1
unknown
Dependencies (17)
+ 9 more |
|
0.24.1
unknown
|
0.24.1
unknown
Dependencies (16)
+ 8 more |
|
0.23.1
unknown
|
0.23.1
unknown
Dependencies (16)
+ 8 more |
|
0.26.1
unknown
3 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-5qv7-j6w5-fr4m
RUSTSEC-2026-0115
May 07, 2026
imageproc has fragile bounds check when sampling from image
Medium
Network
Low
None
None
A read of pixels was coded as modifying coordinates to lie within the image bounds. It would calculate a coordinate by adding a constant to an input and taking the minimum of the resulting coordinate and 'dimension - 1'. This would not protect against malicious inputs that could overflow the addition. Following the tricked bounds check, the image could then be sampled at multiple differently calculated coordinates that exceeded the bounds. Affected versions
0.24.0
0.25.0
Fixed in
0.24.1
0.25.1
0.26.2
References Updated May 07, 2026 · Source: OSV.dev |
0.26.1
unknown
Dependencies (16)
+ 8 more |
|
0.26.0
unknown
yanked
3 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-5qv7-j6w5-fr4m
RUSTSEC-2026-0115
May 07, 2026
imageproc has fragile bounds check when sampling from image
Medium
Network
Low
None
None
A read of pixels was coded as modifying coordinates to lie within the image bounds. It would calculate a coordinate by adding a constant to an input and taking the minimum of the resulting coordinate and 'dimension - 1'. This would not protect against malicious inputs that could overflow the addition. Following the tricked bounds check, the image could then be sampled at multiple differently calculated coordinates that exceeded the bounds. Affected versions
0.24.0
0.25.0
Fixed in
0.24.1
0.25.1
0.26.2
References Updated May 07, 2026 · Source: OSV.dev |
0.26.0
unknown
yanked
Dependencies (16)
+ 8 more |
|
0.25.0
unknown
3 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-5qv7-j6w5-fr4m
RUSTSEC-2026-0115
May 07, 2026
imageproc has fragile bounds check when sampling from image
Medium
Network
Low
None
None
A read of pixels was coded as modifying coordinates to lie within the image bounds. It would calculate a coordinate by adding a constant to an input and taking the minimum of the resulting coordinate and 'dimension - 1'. This would not protect against malicious inputs that could overflow the addition. Following the tricked bounds check, the image could then be sampled at multiple differently calculated coordinates that exceeded the bounds. Affected versions
0.24.0
0.25.0
Fixed in
0.24.1
0.25.1
0.26.2
References Updated May 07, 2026 · Source: OSV.dev |
0.25.0
unknown
Dependencies (17)
+ 9 more |
|
0.24.0
unknown
3 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-5qv7-j6w5-fr4m
RUSTSEC-2026-0115
May 07, 2026
imageproc has fragile bounds check when sampling from image
Medium
Network
Low
None
None
A read of pixels was coded as modifying coordinates to lie within the image bounds. It would calculate a coordinate by adding a constant to an input and taking the minimum of the resulting coordinate and 'dimension - 1'. This would not protect against malicious inputs that could overflow the addition. Following the tricked bounds check, the image could then be sampled at multiple differently calculated coordinates that exceeded the bounds. Affected versions
0.24.0
0.25.0
Fixed in
0.24.1
0.25.1
0.26.2
References Updated May 07, 2026 · Source: OSV.dev |
0.24.0
unknown
Dependencies (16)
+ 8 more |
|
0.23.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.23.0
unknown
Dependencies (16)
+ 8 more |
|
0.22.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.22.0
unknown
Dependencies (15)
+ 7 more |
|
0.21.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.21.0
unknown
Dependencies (15)
+ 7 more |
|
0.20.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.20.0
unknown
Dependencies (15)
+ 7 more |
|
0.19.2
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.19.2
unknown
Dependencies (14)
+ 6 more |
|
0.19.1
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.19.1
unknown
Dependencies (14)
+ 6 more |
|
0.19.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.19.0
unknown
Dependencies (13)
+ 5 more |
|
0.18.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.18.0
unknown
Dependencies (11)
+ 3 more |
|
0.17.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.17.0
unknown
Dependencies (9)
+ 1 more |
|
0.16.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.16.0
unknown
Dependencies (8)
|
|
0.15.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.15.0
unknown
Dependencies (9)
+ 1 more |
|
0.14.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.14.0
unknown
Dependencies (9)
+ 1 more |
|
0.13.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.13.0
unknown
Dependencies (9)
+ 1 more |
|
0.12.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.12.0
unknown
Dependencies (9)
+ 1 more |
|
0.11.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.11.0
unknown
Dependencies (9)
+ 1 more |
|
0.10.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.10.0
unknown
Dependencies (9)
+ 1 more |
|
0.9.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.9.0
unknown
Dependencies (9)
+ 1 more |
|
0.8.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.8.0
unknown
Dependencies (9)
+ 1 more |
|
0.7.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.7.0
unknown
Dependencies (7)
|
|
0.6.1
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.6.1
unknown
Dependencies (7)
|
|
0.6.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.6.0
unknown
Dependencies (7)
|
|
0.5.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.5.0
unknown
Dependencies (7)
|
|
0.4.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.4.0
unknown
Dependencies (7)
|
|
0.3.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.3.0
unknown
Dependencies (7)
|
|
0.2.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.2.0
unknown
Dependencies (7)
|
|
0.1.1
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.1.1
unknown
Dependencies (7)
|
|
0.1.0
unknown
2 CVEs
GHSA-w5p8-4jcx-2j6r
RUSTSEC-2026-0116
May 07, 2026
imageproc: integer overflow in kernel size check leads to out-of-bounds read
Medium
Network
Low
None
None
A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs. Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-qg8r-f7x3-25f7
RUSTSEC-2026-0117
May 07, 2026
imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
Medium
Network
Low
None
None
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered Carefully controlling the coordinates of an image with no data and one non-zero dimension provides an arbitrary read primitive in the first 32-bits of address space with a Bilinear sampling method. Using bicubic sampling can result in a read of a few bytes beyond an allocation. Other out-of-bounds reads may be possible. Affected versions
0.24.0
0.25.0
Fixed in
0.23.1
0.24.1
0.25.1
0.26.2
References Updated Sep 10, 2026 · Source: OSV.dev |
0.1.0
unknown
Dependencies (7)
|