CVE-2026-90596

MEDIUM 6.5

embedded-graphics image_raw.rs new/bytes_per_row integer overflow

CVSS Score

6.5

EPSS Score

0.3%

EPSS Percentile

27th

A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytes_per_row of the file src/image/image_raw.rs. This manipulation causes integer overflow. The attack is possible to be carried out remotely. Upgrading the affected component is recommended. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-190 CWE-189
Vendor	n/a
Product	embedded-graphics
Published	Sep 13, 2026
Last Updated	Sep 15, 2026

Stay Ahead of the Next One

Get instant alerts for n/a embedded-graphics

Be the first to know when new medium vulnerabilities affecting n/a embedded-graphics are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:X/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

n/a / embedded-graphics

0.8.0 0.8.1 0.8.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/403178 vuldb.com: https://vuldb.com/vuln/403178/cti vuldb.com: https://vuldb.com/cve/CVE-2026-90596 vuldb.com: https://vuldb.com/submit/913790 github.com: https://github.com/embedded-graphics/embedded-graphics/issues/820 github.com: https://github.com/embedded-graphics/embedded-graphics/

Credits

🔍 Default01 (VulDB User) VulDB CNA Team