Medium severity6.5NVD Advisory· Published Aug 2, 2023· Updated Jun 17, 2026
CVE-2023-29407
CVE-2023-29407
Description
A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
golang.org/x/imageGo | < 0.10.0 | 0.10.0 |
Affected products
5cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- golang.org/x/image/golang.org/x/image/tiffv5Range: 0
Patches
Vulnerability mechanics
References
13- go.dev/cl/514897nvdPatchWEB
- pkg.go.dev/vuln/GO-2023-1990nvdIssue TrackingPatchVendor AdvisoryWEB
- github.com/advisories/GHSA-j3p8-6mrq-6g7hghsaADVISORY
- go.dev/issue/61581nvdIssue TrackingVendor AdvisoryWEB
- lists.fedoraproject.org/archives/list/[email protected]/message/KO54NBDUJXKAZNGCFOEYL2LKK2RQP6K6/nvdMailing ListThird Party Advisory
- lists.fedoraproject.org/archives/list/[email protected]/message/XWH6Q7NVM4MV3GWFEU4PA67AWZHVFJQ2/nvdMailing ListThird Party Advisory
- nvd.nist.gov/vuln/detail/CVE-2023-29407ghsaADVISORY
- security.netapp.com/advisory/ntap-20230831-0009/nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/[email protected]/message/KO54NBDUJXKAZNGCFOEYL2LKK2RQP6K6ghsaWEB
- lists.fedoraproject.org/archives/list/[email protected]/message/XWH6Q7NVM4MV3GWFEU4PA67AWZHVFJQ2ghsaWEB
- lists.fedoraproject.org/archives/list/[email protected]/message/XZTEP6JYILRBNDTNWTEQ5D4QUUVQBESKghsaWEB
- security.netapp.com/advisory/ntap-20230831-0009ghsaWEB
- lists.fedoraproject.org/archives/list/[email protected]/message/XZTEP6JYILRBNDTNWTEQ5D4QUUVQBESK/nvd
News mentions
0No linked articles in our index yet.