Out-of-bounds Read Affecting imageproc package, versions <0.23.1>=0.24.0 <0.24.1>=0.25.0 <0.25.1>=0.26.0 <0.26.2
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-RUST-IMAGEPROC-16347198
- published3 May 2026
- disclosed1 May 2026
- creditUnknown
Introduced: 1 May 2026
New CVE NOT AVAILABLE CWE-125 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade imageproc to version 0.23.1, 0.24.1, 0.25.1, 0.26.2 or higher.
Overview
Affected versions of this package are vulnerable to Out-of-bounds Read in the Kernel process. An attacker can cause out-of-bounds memory access by supplying a crafted Kernel object with specific coordinate combinations that exploit incorrect bounds checks during matrix operations.