# imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling

Source: https://junglewise.ai/threats/imageproc-out-of-bounds-read-via-nan-coordinates-in-bilinear-bicubic-599dc5b0  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-07  
License: CC BY 4.0 with a link back

Severity: medium · CVSS 4 · Published 2026-05-07

imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling

Technologies: [imageproc (crates.io)](https://junglewise.ai/threats/technologies/imageproc). Vendors: [crates.io](https://junglewise.ai/threats/vendors/crates-io).

## Quick answers

**Is This vulnerability exploited in the wild?** No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

**How severe is This vulnerability?** Medium severity, with a CVSS score of 4, published 7 May 2026.

**Which products and versions are affected?** imageproc (crates.io) SEMVER:introduced=0,fixed=0.23.1.

**Is there a fix for This vulnerability?** Yes. imageproc (crates.io): upgrade to 0.23.1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**Am I affected?** Check whether you run imageproc (crates.io) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- imageproc (crates.io): upgrade to 0.23.1 or later

  ```sh
  cargo update -p imageproc
  ```


## Affected products

- imageproc (crates.io) SEMVER:introduced=0,fixed=0.23.1

## Related threats

- [imageproc: integer overflow in kernel size check leads to out-of-bounds read](https://junglewise.ai/threats/imageproc-integer-overflow-in-kernel-size-check-leads-to-out-of-bounds-efd42f0c)
- [imageproc has fragile bounds check when sampling from image](https://junglewise.ai/threats/imageproc-has-fragile-bounds-check-when-sampling-from-image-b43d907d)
- [RUSTSEC-2026-0116 - Improper check of an invariant resulting in incorrect bounds checks](https://junglewise.ai/threats/rustsec-2026-0116-improper-check-of-an-invariant-resulting-in-incorrect-734c30dc)
- [RUSTSEC-2026-0117 - Fragile bounds check when sampling from image](https://junglewise.ai/threats/rustsec-2026-0117-fragile-bounds-check-when-sampling-from-image-7c203c54)
- [RUSTSEC-2026-0115 - Fragile bounds check when sampling from image](https://junglewise.ai/threats/rustsec-2026-0115-fragile-bounds-check-when-sampling-from-image-d30ef9fe)