CVE-2026-46599

The golang.org/x/image/tiff package contains a vulnerability where the TIFF decoder fails to impose limits on the size of PackBits-compressed data . An attacker can exploit this by providing a maliciously-crafted image with small pixel dimensions and encoded size, forcing the decoder to process a...