28 matches found
Fedora 45 : golang-x-image (2026-3e4b43a4cd)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3e4b43a4cd advisory. Automatic update for golang-x-image-0.44.0-1.fc45. Changelog Tue Jul 21 2026 Packit - 0.44.0-1 - Update to 0.44.0 upstream release - Resolves: rhbz2343804 -...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the tiff decoder. An attacker can cause a panic and potentially disrupt service by providing a specially crafted image file with an out-of-bounds strip offset. Remediation Upgrade golang.org/x/image/tiff to versio...
CVE-2026-46604 Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image
The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...
CVE-2026-46604 Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image
The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...
CVE-2026-46604
The TIFF decoder is vulnerable to a panic condition when processing an invalid image containing an out-of-bounds strip offset . This vulnerability affects multiple software components, including rclone , keybase-client , mattermost , listmonk , mattermost-fips , rclone-fips , seaweedfs-fips , git...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the absence of a restriction on tile sizes in the TIFF image decoding process. An attacker can cause excessive memory consumption by providing a specially crafted image file wi...
CVE-2026-46602
The golang-x-image package is vulnerable to unbounded memory consumption because the TIFF decoder fails to set a size limit on tiles in tiled images. A malicious or corrupt image with a very large tile can trigger this issue, potentially leading to service failure or remote exploitation. Remediat...
CVE-2026-46602 Lack of limit on tile sizes in x/image/tiff in golang.org/x/image
The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption...
ROS-20260622-73-0038
The vulnerability in golang-x-image is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-42500 Panic when reading out of bound palette index in golang.org/x/image/bmp
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image...
The vulnerability of the golang.org/x/image/tiff library in the Go programming language, which allows attackers to execute arbitrary code.
The vulnerability of the golang.org/x/image/tiff library in the Go programming language is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2026-33813
A flaw was found in golang.org/x/image. A remote attacker could exploit this vulnerability by providing a specially crafted WEBP image with an invalid, large size. This could cause the application to panic and crash on 32-bit platforms, leading to a Denial of Service DoS...
CVE-2026-33812
A flaw was found in golang.org/x/image. A remote attacker could exploit this vulnerability by providing a specially crafted font file. Parsing this malicious file can lead to excessive memory allocation, which may result in a Denial of Service DoS for the affected system. Mitigation Mitigation fo...
ROS-20260430-73-0006
Vulnerability in golang-x-image related to unrestricted download of dangerous file types. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
CVE-2026-33812 Excessive memory allocation when decoding malicious SFNT in golang.org/x/image
Parsing a malicious font file can cause excessive memory allocation...
CVE-2026-33812 Excessive memory allocation when decoding malicious SFNT in golang.org/x/image
Parsing a malicious font file can cause excessive memory allocation...
CVE-2026-33813 Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
CVE-2026-33813
The golang.org/x/image package is vulnerable to a panic when parsing a WEBP image with an invalid, large size on 32-bit platforms . This vulnerability can lead to remote service interruptions . The issue is addressed in golang.org/x/image/webp version v0.39.0 . Affected applications include rclon...