CVE-2026-90593
embedded-graphics image_raw.rs draw_sub_image integer overflow
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was determined in embedded-graphics up to 0.8.2. This affects the function ImageRaw::draw_sub_image of the file src/image/image_raw.rs. Executing a manipulation of the argument width can lead to integer overflow. The attack may be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-190 CWE-189 |
| Vendor | n/a |
| Product | embedded-graphics |
| Published | Sep 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a embedded-graphics
Be the first to know when new high vulnerabilities affecting n/a embedded-graphics are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / embedded-graphics
0.8.0 0.8.1 0.8.2
References
vuldb.com: https://vuldb.com/vuln/403175 vuldb.com: https://vuldb.com/vuln/403175/cti vuldb.com: https://vuldb.com/cve/CVE-2026-90593 vuldb.com: https://vuldb.com/submit/913787 github.com: https://github.com/embedded-graphics/embedded-graphics/issues/821 github.com: https://github.com/embedded-graphics/embedded-graphics/
Credits
🔍 Default01 (VulDB User) VulDB CNA Team