{"id":"CVE-2026-71202","published":"2026-08-05T08:16:42.080","lastModified":"2026-08-10T12:17:23.930","description":"The raster Rust crate's crop function (src/editor.rs) clamps the crop width/height against source dimensions but only clamps the offset_x/offset_y parameters against 0, never against the source width/height.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-191"],"vendors":[],"products":[],"references":[{"url":"https://github.com/kosinix/raster/issues/30","tags":[]},{"url":"https://github.com/kosinix/raster/issues/30","tags":[]}],"exploitRefs":[{"url":"https://github.com/kosinix/raster/issues/30","tags":[]},{"url":"https://github.com/kosinix/raster/issues/30","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows for potential out-of-bounds memory access due to improper validation of offset parameters in the crop function, which could lead to arbitrary code execution if exploited.","exploitability":"Exploitation requires control over input values for offset_x/offset_y, making it moderately difficult but feasible with proper crafting of inputs.","blast_radius":"If exploited, the impact is high as it could allow an attacker to execute arbitrary code within the application's security context, leading to potential data loss or system compromise.","remediation":"Update to a patched version of the raster crate that addresses the validation issue in the crop function parameters.","tags":["rce","memory-access","rust"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-08-11T06:58:54.038Z"}}