https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 05:49:25 +0000 https://vulnerability.circl.lu/vuln/rustsec-2026-0116 <p><strong>Affected:</strong> crates.io: imageproc</p> <p>A bounds verification of a slice storage of a 2-dimensional matrix&#39;s coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast *after* the multiplication and consequently fail to detect possible violations when overflow occurs.</p> <p>Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted `Kernel` object, certain combinations of coordinates could then cause an out-of-bounds access in an `unsafe` function while fulfilling its documented preconditions. The kernel value could be passed to library functions that trusted the preconditions and then performed such reads.</p> <p><strong>Affected:</strong> crates.io: imageproc</p> <p>A bounds verification of a slice storage of a 2-dimensional matrix&#39;s coefficients (a kernel) would compare the total size against the product of individual dimensions. This would erroneously cast *after* the multiplication and consequently fail to detect possible violations when overflow occurs.</p> <p>Afterwards, the individual sizes were trusted to properly constrain coordinates within the matrix to indices valid for the underlying storage. With a crafted `Kernel` object, certain combinations of coordinates could then cause an out-of-bounds access in an `unsafe` function while fulfilling its documented preconditions. The kernel value could be passed to library functions that trusted the preconditions and then performed such reads.</p> https://vulnerability.circl.lu/vuln/rustsec-2026-0116