CVE-2026-71202

Name of the Vulnerable Software and Affected Versions raster Rust crate (affected versions not specified)

Description The crop() function (src/editor.rs) fails to properly clamp the offset x and offset y parameters against the source width and height, only clamping them against 0. If an offset exceeds the source dimensions, the calculation width2 - offset x (or the height equivalent) underflows to a negative i32. In release builds, this negative value is cast to a usize within the Vec::with capacity() call of the Image::blank() function, leading to a capacity-overflow panic that crashes the process when a crafted crop request is processed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.