Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-08-05T06:58:53 raster: Raster: Denial of Service via integer underflow in image cropping function 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-191

The raster Rust crate's crop() function (src/editor.rs) clamps the crop width/height against source dimensions but only clamps the offset_x/offset_y parameters against 0, never against the source width/height. When an offset exceeds the corresponding source dimension, `width2 - offset_x` (or the height equivalent) underflows to a negative i32, which release builds do not trap; the negative value is then cast to usize inside Image::blank()'s Vec::with_capacity() call, triggering a capacity-overflow panic and crashing the process on a single crafted crop request.

A flaw was found in the `raster` Rust crate. A remote attacker could exploit an integer underflow vulnerability in the image cropping function by sending a specially crafted request. This could lead to a denial of service (DoS), causing the application to crash and become unavailable.

Logging Subsystem for Red Hat OpenShift Not affected openshift-logging/cluster-logging-rhel9-operator Red Hat OpenShift Container Platform 4 Affected openshift4/ose-tests-rhel9 https://www.cve.org/CVERecord?id=CVE-2026-71202 https://nvd.nist.gov/vuln/detail/CVE-2026-71202 https://github.com/kosinix/raster/issues/30