CyberRota Analysis
AI-GeneratedThe vulnerability in imagecli's `scale <ratio>` operation allows an attacker to supply an excessively large ratio, leading to an attempt to allocate an unbounded amount of memory, which can crash the application. This poses a significant risk for any application that integrates imagecli and processes user-controlled input, making it critical for developers and organizations using this library to prioritize patching. Immediate action is advised to prevent potential denial-of-service attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
imagecli's pipeline operation (Scale::apply in src/image_ops.rs) computes output width/height as (dimension as f32 * ratio) as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. Any application embedding imagecli as a library and accepting user-controlled pipeline strings is remotely crashable with a single request.