CVE-2026-70378

Name of the Vulnerable Software and Affected Versions imagecli (affected versions not specified)

Description The carve <ratio> pipeline operation fails to validate that the ratio variable is positive. When a negative value is provided, the computed target width saturates to 0 during a float-to-uint cast. This value is then passed to the shrink width() function in the imageproc::seam carving module, which triggers a panic and crashes the process if the width is less than 2. This issue occurs within the Carve::apply() function located in src/image ops.rs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.