Input Validation Vulnerability in imagecli by TheOtherPhil

CVE-2026-70378

What is CVE-2026-70378?

The imagecli tool contains an input validation flaw in its 'carve ' pipeline operation. Specifically, the function Carve::apply() does not properly validate the input ratio, allowing a negative value to be processed. When a negative ratio is passed, the resulting target width is inaccurately computed as 0, leading to a panic in the seam_carving::shrink_width function. This issue can cause the image processing task to fail and crash the application, highlighting the critical need for input validation to prevent improper function execution.

References