1 matches found
CVE-2026-70377: Memory Allocation with Excessive Size Value
imagecli's pipeline operation Scale::apply in src/imageops.rs computes output width/height as dimension as f32 ratio as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. Any application embedding imagecli as a libra...
7.5CVSS5.8AI score0.0046EPSS
SaveExploits0References2
20