CyberSecBulletin

Theotherphil vulnerabilities

We track 2 vulnerabilities in Theotherphil products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Theotherphil vulnerabilities

  • 7.5 High severity

    imagecli: Improper Validation of Specified Quantity in Input

    CVE-2026-70378Theotherphil

    imagecli's pipeline operation (Carve::apply in src/image_ops.rs) only asserts , never validating that the ratio is positive. A negative ratio (e.g. -5) causes the computed target width to saturate to 0 via Rust's defined float-to-uint cast, which is then passe

  • 7.5 High severity

    imagecli: Memory Allocation with Excessive Size Value

    CVE-2026-70377Theotherphil

    imagecli's pipeline operation (Scale::apply in src/image_ops.rs) computes output width/height as (dimension as f32 * ratio) as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. A