CVE-2026-71202

Summary

The flaw allows for potential out-of-bounds memory access due to improper validation of offset parameters in the crop function, which could lead to arbitrary code execution if exploited.

Exploitability

Exploitation requires control over input values for offset_x/offset_y, making it moderately difficult but feasible with proper crafting of inputs.

Blast radius

If exploited, the impact is high as it could allow an attacker to execute arbitrary code within the application's security context, leading to potential data loss or system compromise.

Prioritized remediation

Update to a patched version of the raster crate that addresses the validation issue in the crop function parameters.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.