HIGH

CVE-2026-90593

2026-09-13 CVSS v3.1

CVSS

7.3

Description

A vulnerability was determined in embedded-graphics up to 0.8.2. This affects the function ImageRaw::draw_sub_image of the file src/image/image_raw.rs. Executing a manipulation of the argument width can lead to integer overflow. The attack may be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.

Weakness (CWE)

CWE-189 Numeric Errors

CWE-190 Integer Overflow

EPSS Score

0.38%

Probability of exploitation in next 30 days

31.9th percentile

References

https://github.com/embedded-graphics/embedded-graphics/ https://github.com/embedded-graphics/embedded-graphics/issues/821 https://vuldb.com/cve/CVE-2026-90593 https://vuldb.com/submit/913787 https://vuldb.com/vuln/403175 https://vuldb.com/vuln/403175/cti

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE