The vulnerability exists in imagecli's carve <ratio> pipeline operation (Carve::apply() in src/image_ops.rs). The code asserts that the ratio is less than or equal to 1.0 but does not check if it is positive. When a negative ratio is provided, the computed target width saturates to 0 due to Rust's float-to-uint cast behavior. This zero width is passed to imageproc::seam_carving::shrink_width, which panics if the width is below 2, causing the process to crash. This is a distinct but related issue to a similar missing input validation in the scale operation within the same file.

The impact is a denial of service caused by an application crash when a negative ratio is supplied to the carve operation. There is no confidentiality, integrity, or information disclosure impact reported. The CVSS score of 7.5 reflects a high severity due to the remote, unauthenticated nature of the crash and the lack of user interaction required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid supplying negative values to the carve <ratio> operation to prevent crashes.