The vulnerability of the golang-x-image package, a programming language, allows attackers to trigger a service failure.

🗓️ 21 Sep 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

The vulnerability of the golang-x-image package, a programming language, is related to unlimited resource distribution. Exploiting this vulnerability can allow an attacker to cause service failures remotely.

Reporter	Title	Published	Views	Family All 165
attackerkb	CVE-2026-46599	29 May 202619:35	–	attackerkb
Chainguard	CVE-2026-46599 vulnerabilities	16 Jun 202620:22	–	cgr
Circl	CVE-2026-46599	29 May 202621:57	–	circl
CNNVD	Google Go 安全漏洞	29 May 202600:00	–	cnnvd
CVE	CVE-2026-46599	29 May 202619:35	–	cve
Cvelist	CVE-2026-46599 Excessive resource consumption in PackBits decompression in golang.org/x/image/tiff	29 May 202619:35	–	cvelist
Debian CVE	CVE-2026-46599	29 May 202619:35	–	debiancve
EUVD	EUVD-2026-33432	2 Jul 202621:01	–	euvd
Tenable Nessus	Fedora 45 : golang-x-image (2026-3e4b43a4cd)	21 Jul 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-46599	30 May 202600:00	–	nessus

Vulners

Node

red_hat,red_hat_openshift_container_platformMatch4

go golang.org/x/imageRange<0.41.0

Source	Link
cs	www.cs.opensource.google/go/x/image
github	www.github.com/advisories/GHSA-q675-qj96-32m9
go	www.go.dev/cl/759960
go	www.go.dev/issue/79577
groups	www.groups.google.com/g/golang-announce/c/uhYX90BlBvI
pkg	www.pkg.go.dev/vuln/GO-2026-5032
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
repo	www.repo.red-soft.ru/redos/8.0/x86_64/updates/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-46599
deb	www.deb.freexian.com/extended-lts/tracker/CVE-2026-46599

21 Sep 2026 00:00Current

CVSS 37.5

CVSS 27.8

EPSS0.00353