Approved changes feed: RSS · Atom

cpe:2.3:a:image-rs:image:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorImage Rs (50194924-5652-5e62-a3b4-ca22848ac875)
ProductImage (91243fa2-7c13-54a1-98b6-7a3bd7029e9b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/rust-image purl2cpe 2026-06-01 10:11:10.932944
pkg:github/image-rs/image purl2cpe 2026-06-01 10:11:10.932947
pkg:rpm/fedora/rust-image purl2cpe 2026-06-01 10:11:10.932950
pkg:rpm/opensuse/rust-image purl2cpe 2026-06-01 10:11:10.932953

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-16138 vulnerable 2026-06-08 05:13:07.774391 Details available
An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::set_len is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution.
Published: 2019-09-09T11:49:30.000Z
Updated: 2024-08-05T01:10:41.367Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.