Skip to content
OpenAdvisories

Package · crates.io

image

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.5
    CVE-2020-35916

    Mutable reference with immutable provenance in image

    An issue was discovered in the image crate before 0.23.12 for Rust. A Mutable reference has immutable provenance. (In the case of LLVM, the IR may be always correct.)

    image rust-image rust-image Debian Ubuntu crates.io
  • Critical 9.8
    CVE-2019-16138

    Use after free in image

    An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::set_len is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution.

    image crates.io