The embedded-graphics library versions up to 0.8.2 contain a vulnerability in the ImageRaw::draw_sub_image function located in src/image/image_raw.rs. Specifically, improper handling of the width argument can lead to an integer overflow. This flaw can be triggered remotely without privileges or user interaction, potentially allowing an attacker to affect the confidentiality, integrity, and availability of the system using this library. The issue was reported early to the project, but no response or patch has been issued yet.

Exploitation of this vulnerability can lead to an integer overflow, which may cause memory corruption or unexpected behavior. The CVSS score of 7.3 indicates a medium severity with impacts on confidentiality, integrity, and availability. Since the attack vector is network-based with no required privileges or user interaction, remote exploitation is feasible. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the project has not responded with a fix, users should monitor the official embedded-graphics repository or advisories for updates. Until a patch is available, consider mitigating exposure by limiting access to systems using this library or applying additional input validation where possible.