CVE-2026-90596

embedded-graphics (Rust library) up to 0.8.2 is affected by an integer overflow in the ImageRaw::new/bytes_per_row function (src/image/image_raw.rs) on 32-bit platforms. The flaw can be triggered remotely without authentication or user interaction. Per CVSS 3.1, the impact is rated MEDIUM (6.5) w...

CVE-2026-90596: Integer Overflow or Wraparound

A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytesperrow of the file src/image/imageraw.rs. This manipulation causes integer overflow. The attack is possible to be carried out remotely. Upgrading the affected component is...

PT-2026-90975

Name of the Vulnerable Software and Affected Versions embedded-graphics versions prior to 0.8.3 Description An integer overflow occurs in the ImageRaw::new/bytes per row function within the src/image/image raw.rs file when running on 32-bit systems. This issue allows for remote exploitation...