AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-05T08:16:41.957Z and has not been modified since then. The `carve <ratio>` pipeline operation in imagecli does not validate if the ratio is positive, leading to a potential crash when a negative ratio is provided. This vulnerability has a high CVSS score of 7.5 and is classified as HIGH severity. Af [truncated]
The imagecli library, used in various applications, contains a remote crash vulnerability in its `scale <ratio>` pipeline operation. This vulnerability is caused by a lack of upper-bound validation on the CLI-supplied ratio, which can lead to an attempted allocation of hundreds of terabytes and abort the process. A large ratio, such as 100000, can be used to exploit this vulnerability with a single reques [truncated]
