CVE-2026-46601

The CVE affects the webp decoder in golang.org/x/image (webp). A VP8 chunk with dimensions that do not match the canvas size can cause a panic in processing, per the CVE record. No explicit exploit details or remediation are provided in the connected documents; they only describe the vulnerabilit...