Out-of-bounds Read Affecting imageproc package, versions <0.23.1>=0.24.0 <0.24.1>=0.25.0 <0.25.1>=0.26.0 <0.26.2
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-RUST-IMAGEPROC-16347196
- published3 May 2026
- disclosed1 May 2026
- creditUnknown
Introduced: 1 May 2026
New CVE NOT AVAILABLE CWE-125 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade imageproc to version 0.23.1, 0.24.1, 0.25.1, 0.26.2 or higher.
Overview
Affected versions of this package are vulnerable to Out-of-bounds Read via improper bounds checking in the warp_into or warp_into_with functions. An attacker can read arbitrary memory locations by supplying carefully crafted floating point coordinates through a controlled projection matrix, potentially leading to exposure of sensitive data or reading out-of-bounds memory.