Buffer Overflow in Raster Rust Crate Affecting Image Processing

CVE-2026-71202

What is CVE-2026-71202?

The Raster Rust crate contains a vulnerability in its crop() function that fails to properly validate the offset parameters against the source image's dimensions. When the offset parameters exceed the source dimensions, an underflow occurs, ultimately leading to a panic due to capacity overflow. This erroneous behavior can cause a crash during image processing, making applications utilizing this crate susceptible to unexpected terminations when handling crafted crop requests.

References