CVE-2026-70377

Published: Aug 5, 2026Modified: Aug 28, 2026Deferred

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c (Secondary)

Description

imagecli's pipeline operation (Scale::apply in src/image_ops.rs) computes output width/height as (dimension as f32 * ratio) as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. Any application embedding imagecli as a library and accepting user-controlled pipeline strings is remotely crashable with a single request.

Related CWEs

CWE-789

Memory Allocation with Excessive Size Value

The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

References (2)

https://github.com/theotherphil/imagecli/issues/66

Source: 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c

https://github.com/theotherphil/imagecli/issues/66

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.