9 matches found
CVE-2026-46604
The TIFF decoder is vulnerable to a panic condition when processing an invalid image containing an out-of-bounds strip offset . This vulnerability affects multiple software components, including rclone , keybase-client , mattermost , listmonk , mattermost-fips , rclone-fips , seaweedfs-fips , git...
CVE-2026-33813
A flaw was found in golang.org/x/image. A remote attacker could exploit this vulnerability by providing a specially crafted WEBP image with an invalid, large size. This could cause the application to panic and crash on 32-bit platforms, leading to a Denial of Service DoS...
ROS-20260430-73-0006
Vulnerability in golang-x-image related to unrestricted download of dangerous file types. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
CVE-2026-33812 Excessive memory allocation when decoding malicious SFNT in golang.org/x/image
Parsing a malicious font file can cause excessive memory allocation...
CVE-2026-33813 Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
CVE-2026-33813
The golang.org/x/image package is vulnerable to a panic when parsing a WEBP image with an invalid, large size on 32-bit platforms . This vulnerability can lead to remote service interruptions . The issue is addressed in golang.org/x/image/webp version v0.39.0 . Affected applications include rclon...
CVE-2026-33813 Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...