CVE-2026-71202 Details

A denial-of-service vulnerability has been identified in the raster Rust crate, specifically in the crop() function of the editor module. The issue arises because the function improperly validates offset parameters against the source image dimensions. When an offset exceeds the source width or height, it causes an integer underflow, leading to a negative value that, when converted to an unsigned size, requests an excessive memory allocation. This allocation request triggers a process panic, crashing the application. The vulnerability affects all published versions of the raster crate, which is used in image processing applications that allow users to specify crop dimensions and offsets.

To address this vulnerability, the raster crate's crop() function should be modified to clamp offset values against the source dimensions before performing the subtraction. Additionally, the Image::blank() function should validate that width and height are positive before proceeding with the allocation.