diff --git a/crates/imageproc/RUSTSEC-0000-0000.md b/crates/imageproc/RUSTSEC-0000-0000.md new file mode 100644 index 000000000..90394b367 --- /dev/null +++ b/crates/imageproc/RUSTSEC-0000-0000.md @@ -0,0 +1,15 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "imageproc" +date = "2023-08-08" +url = "https://github.com/image-rs/imageproc/issues/537" +categories = ["memory-corruption"] + +[versions] +patched = [] +``` + +# Integer Overflow Occurs in imageproc::contrast::adaptive_threshold. + +The vulnerability in this library stems from the improper handling of certain values when parsing a PNG image, particularly within the function adaptive_threshold(). This function may miscalculate an integer, leading to an integer overflow. If an attacker crafts a PNG with specific metadata that triggers an overflow, the library could be compromised