CyberRota Analysis
AI-GeneratedThe vulnerability affects the `carve <ratio>` operation in imagecli, where the lack of validation for a negative ratio can lead to a crash due to an invalid target width being computed. This results in a panic in the seam_carving function, causing the process to terminate unexpectedly. Organizations using imagecli should prioritize addressing this issue to prevent potential disruptions in their image processing workflows.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
imagecli's pipeline operation (Carve::apply in src/image_ops.rs) only asserts , never validating that the ratio is positive. A negative ratio (e.g. -5) causes the computed target width to saturate to 0 via Rust's defined float-to-uint cast, which is then passed to imageproc::seam_carving::shrink_width — a function that panics when given a width below 2, crashing the process.