Golang.org/x/image

13 CVEs across 5 Golang.org/x/image products. Browse Golang.org/x/image vulnerabilities, severities, and proof-of-concept exploits.

Golang.org/x/image products with known CVEs

ProductCVEs
Golang.org/x/image/tiff8
Golang.org/x/image/webp2
Golang.org/x/image/bmp1
Golang.org/x/image/font/sfnt1
Golang.org/x/image/vp8l1
Golang.org/x/image CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-46603High7.52026-08-14VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree gr…
CVE-2026-46604High7.52026-06-26The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.
CVE-2026-46602High7.52026-06-25The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbou…
CVE-2026-46601High7.52026-06-25The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.
CVE-2026-46599High7.52026-05-29The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in t…
CVE-2026-42500Medium5.32026-05-29Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.
CVE-2026-33813High7.52026-04-21Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.
CVE-2026-33812Medium6.12026-04-21Parsing a malicious font file can cause excessive memory allocation.
CVE-2026-33809Medium5.32026-03-25A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-m…
CVE-2024-24792High7.52024-06-27Parsing a corrupt or malicious image with invalid color indices can cause a panic.
CVE-2023-29408Medium6.52023-08-02The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image (both in terms…
CVE-2023-29407Medium6.52023-08-02A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU co…
CVE-2022-41727Medium5.52023-02-28An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of serv…