CyberRota Analysis
AI-GeneratedThe raster Rust crate's crop() function is vulnerable due to improper validation of offset parameters, which can lead to a capacity-overflow panic when the offsets exceed the source dimensions. This vulnerability can cause a denial-of-service condition by crashing the application when processing specially crafted crop requests. Developers and organizations utilizing the raster crate should prioritize addressing this issue to prevent potential disruptions in their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The raster Rust crate's crop function (src/editor.rs) clamps the crop width/height against source dimensions but only clamps the offset_x/offset_y parameters against 0, never against the source width/height.