Lucene search
GoogleOSV:GO-2024-2937HistoryJun 25, 2024 - 10:06 p.m.
Panic when parsing invalid palette-color images in golang.org/x/image
2024-06-2522:06:09
Google
osv.dev
4
parsing
palette-color
images
golang.org/x/image
corrupt
malicious
color indices
panic
software
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.7%
Parsing a corrupt or malicious image with invalid color indices can cause a panic.
| CPE | Name | Operator | Version |
|---|---|---|---|
| golang.org/x/image | lt | 0.18.0 |
References
Related
cve
cve
CVE-2023-36308
2023-09-05 04:15:08
CVE-2024-24792
2024-06-27 18:15:13
debiancve
debiancve
CVE-2023-36308
2023-09-05 04:15:08
CVE-2024-24792
2024-06-27 18:15:13
nessus
nessus
Fedora 39 : kitty (2024-25b47765c6)
2024-06-03 00:00:00
github
github
Panic when parsing invalid palette-color images in golang.org/x/image
2024-06-26 19:26:38
Crash when processing crafted TIFF files
2023-09-05 06:30:14
cvelist
cvelist
CVE-2024-24792 Panic when parsing invalid palette-color images in golang.org/x/image
2024-06-27 17:37:38
CVE-2023-36308
2023-09-05 00:00:00
wolfi
wolfi
CVE-2024-24792 vulnerabilities
2024-06-28 15:21:31
osv
osv
Crash when processing crafted TIFF files
2023-09-05 06:30:14
CGA-ghrp-j9wv-h896
2024-06-28 13:19:28
Panic when parsing invalid palette-color images in golang.org/x/image
2024-06-26 19:26:38
openvas
openvas
Fedora: Security Advisory for kitty (FEDORA-2024-25b47765c6)
2024-06-07 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: kitty-0.31.0-2.fc39
2024-06-03 01:07:26
prion
prion
Design/Logic Flaw
2023-09-05 04:15:00
nvd
nvd
CVE-2024-24792
2024-06-27 18:15:13
CVE-2023-36308
2023-09-05 04:15:08
ubuntucve
ubuntucve
CVE-2023-36308
2023-09-05 00:00:00
vulnrichment
vulnrichment
CVE-2023-36308
2023-09-05 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.7%
Related for OSV:GO-2024-2937