Suggestions search

All statuses

Filter by:

With package: haskellPackages.diagrams-rasterific

Found 2 matching suggestions

View:

Compact

Detailed

Untriaged

Permalink CVE-2026-71202

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 1 month, 2 weeks ago Activity log

Created suggestion 1 month, 2 weeks ago

raster: Integer Underflow in crop() Offset Handling Causes Capacity-Overflow Panic

The raster Rust crate's crop() function (src/editor.rs) clamps the crop width/height against source dimensions but only clamps the offset_x/offset_y parameters against 0, never against the source width/height. When an offset exceeds the corresponding source dimension, `width2 - offset_x` (or the height equivalent) underflows to a negative i32, which release builds do not trap; the negative value is then cast to usize inside Image::blank()'s Vec::with_capacity() call, triggering a capacity-overflow panic and crashing the process on a single crafted crop request.

References

https://github.com/kosinix/raster/issues/30 exploit

Affected products

raster

=<0.2.1

Matching in nixpkgs

pkgs.rastertoezpl

CUPS driver for GODEX printers

nixos-unstable -
- nixos-unstable-small 1.1.12
nixos-26.05 -
- nixos-26.05-small 1.1.12

pkgs.librasterlite2

Advanced library supporting raster handling methods

nixos-unstable -
- nixos-unstable-small 1.1.0-beta1
nixos-26.05 -
- nixos-26.05-small 1.1.0-beta1

pkgs.libtorrent-rasterbar

Efficient feature complete C++ bittorrent implementation

nixos-unstable -
- nixos-unstable-small 2.0.13
nixos-26.05 -
- nixos-26.05-small 2.0.12

pkgs.cups-drv-rastertosag-gdi

CUPS driver for Ricoh Aficio SP 1000S and SP 1100S printers

nixos-unstable -
- nixos-unstable-small 0.1
nixos-26.05 -
- nixos-26.05-small 0.1

pkgs.haskellPackages.Rasterific

A pure haskell drawing engine

nixos-unstable -
- nixos-unstable-small 0.7.5.4
nixos-26.05 -
- nixos-26.05-small 0.7.5.4

pkgs.libtorrent-rasterbar-1_2_x

C++ BitTorrent implementation focusing on efficiency and scalability

nixos-unstable -
- nixos-unstable-small 1.2.19
nixos-26.05 -
- nixos-26.05-small 1.2.19

pkgs.libtorrent-rasterbar-2_0_x

Efficient feature complete C++ bittorrent implementation

nixos-unstable -
- nixos-unstable-small 2.0.13
nixos-26.05 -
- nixos-26.05-small 2.0.12

pkgs.python313Packages.rasterio

Python package to read and write geospatial raster data

nixos-unstable -
- nixos-unstable-small 1.5.1
nixos-26.05 -
- nixos-26.05-small 1.5.0

pkgs.python314Packages.rasterio

Python package to read and write geospatial raster data

nixos-unstable -
- nixos-unstable-small 1.5.1
nixos-26.05 -
- nixos-26.05-small 1.5.0

pkgs.haskellPackages.rasterific-svg

SVG renderer based on Rasterific

nixos-unstable -
- nixos-unstable-small 0.3.3.2
nixos-26.05 -
- nixos-26.05-small 0.3.3.2

pkgs.python313Packages.django-raster

Basic raster data integration for Django

nixos-unstable -
- nixos-unstable-small 0.8.1
nixos-26.05 -
- nixos-26.05-small 0.8.1

pkgs.python314Packages.django-raster

Basic raster data integration for Django

nixos-unstable -
- nixos-unstable-small 0.8.1
nixos-26.05 -
- nixos-26.05-small 0.8.1

pkgs.haskellPackages.diagrams-rasterific

Rasterific backend for diagrams

nixos-unstable -
- nixos-unstable-small 1.5
nixos-26.05 -
- nixos-26.05-small 1.5

pkgs.python313Packages.libtorrent-rasterbar

Efficient feature complete C++ bittorrent implementation

nixos-unstable -
- nixos-unstable-small 2.0.13
nixos-26.05 -
- nixos-26.05-small 2.0.12

pkgs.python314Packages.libtorrent-rasterbar

Efficient feature complete C++ bittorrent implementation

nixos-unstable -
- nixos-unstable-small 2.0.13
nixos-26.05 -
- nixos-26.05-small 2.0.12

Package maintainers

@Yarny0 Yarny
@autra Augustin Trancart <augustin.trancart@gmail.com>
@l0b0 Victor Engmark <victor@engmark.name>
@imincik Ivan Mincik <ivan.mincik@gmail.com>
@nh2 Niklas Hambüchen <mail@nh2.me>
@nialov Nikolas Ovaskainen <nikolasovaskainen@gmail.com>
@sikmir Nikolay Korotkiy <sikmir@disroot.org>
@willcohen Will Cohen
@StarGate01 Christoph Honal <christoph.honal@web.de>

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-7182

9.2 CRITICAL

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): High (H)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): High (H)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 4 months, 1 week ago by @LeSuisse Activity log

Created suggestion 4 months, 1 week ago
@LeSuisse dismissed (not in Nixpkgs) 4 months, 1 week ago

Path Traversal in Diagram

Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization. An unauthenticated user could craft the html payload which could include local files from the server and display them in the generated pdf. This issue was fixed in version 1.1.1.