Imageproc: Fragile bounds check when sampling from image
Affects imageprocSource GCVE Database
Fixed in 0.26.2 : update imageproc when convenient.
Data as of 27 Oct 2026, 02:43 UTC
Rated Medium by Threat Radar's AI analysis
- Patch
- Available – fixed in 0.26.2, 0.25.1, 0.24.1
What to do
Upgrade imageproc to 0.26.2, 0.25.1 or 0.24.1.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
crates.ioimageprocpkg:cargo/imageprocOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A fix is available in imageproc versions 0.24.1, 0.25.1, and 0.26.2. Users should upgrade to these or later versions to remediate the vulnerability.
Description
The imageproc library contained a vulnerability due to a fragile bounds check when sampling pixels from an image. The code attempted to constrain coordinates within image bounds by adding a constant to an input coordinate and taking the minimum with 'dimension - 1', but this approach did not prevent integer overflow. As a result, malicious inputs could cause coordinate calculations to exceed image bounds, allowing out-of-bounds pixel reads.