CVE-2026-70377

HighCVSS 7.5

Published: 05/08/2026(UTC)Updated: 28/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

29th percentile - higher than 29% of all known CVEs

Summary

The imagecli library's pipeline operation (Scale::apply in src/image_ops.rs) computes output width/height as (dimension as f32 * ratio) as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. Any application embedding imagecli as a library and accepting user-controlled pipeline strings is remotely crashable with a single request.

Risk Assessment

The risk is the possibility of remotely causing an application crash, which can lead to denial of service and unavailability of the system to users.

Recommendation

It is recommended to update the imagecli library to a version containing a fix for scale ratio validation or to add your own range validation before passing data to the Scale::apply function.

Other vulnerabilities in imagecli

CVE-2026-70378High
imagecli's pipeline operation only asserts, never validating that the ratio is positive. A negative ratio causes the target width to saturate to 0, which is passed to imageproc::seam_carving::shrink_width, a function that panics when given a width below 2, crashing the process.

Original NVD description (English source)

imagecli's pipeline operation (Scale::apply in src/image_ops.rs) computes output width/height as (dimension as f32 * ratio) as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. Any application embedding imagecli as a library and accepting user-controlled pipeline strings is remotely crashable with a single request.