CVE-2024-24792

2024-06-2718:15:13

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-24792

image parsing

invalid color indices

unix

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

Parsing a corrupt or malicious image with invalid color indices can cause a panic.

OSVersionArchitecturePackageVersionFilename
Debian12allgolang-golang-x-image<= 0.5.0-1golang-golang-x-image_0.5.0-1_all.deb
Debian11allgolang-golang-x-image<= 0.0~git20200119.58c2397-1golang-golang-x-image_0.0~git20200119.58c2397-1_all.deb
Debian999allgolang-golang-x-image<= 0.16.0-1golang-golang-x-image_0.16.0-1_all.deb
Debian13allgolang-golang-x-image<= 0.16.0-1golang-golang-x-image_0.16.0-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	golang-golang-x-image	<= 0.5.0-1	golang-golang-x-image_0.5.0-1_all.deb
Debian	11	all	golang-golang-x-image	<= 0.0~git20200119.58c2397-1	golang-golang-x-image_0.0~git20200119.58c2397-1_all.deb
Debian	999	all	golang-golang-x-image	<= 0.16.0-1	golang-golang-x-image_0.16.0-1_all.deb
Debian	13	all	golang-golang-x-image	<= 0.16.0-1	golang-golang-x-image_0.16.0-1_all.deb