imagecli vulnerabilities

2 known vulnerabilities in imagecli from Theotherphil. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  imagecli: Improper Validation of Specified Quantity in Input

  CVE-2026-70378Aug 5, 2026Theotherphil

  imagecli's pipeline operation (Carve::apply in src/image_ops.rs) only asserts , never validating that the ratio is positive. A negative ratio (e.g. -5) causes the computed target width to saturate to 0 via Rust's defined float-to-uint cast, which is then passe

• 7.5 High severity

  imagecli: Memory Allocation with Excessive Size Value

  CVE-2026-70377Aug 5, 2026Theotherphil

  imagecli's pipeline operation (Scale::apply in src/image_ops.rs) computes output width/height as (dimension as f32 * ratio) as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. A