← All advisories

Medium severity5.3NVD Advisory· Published May 29, 2026· Updated Jun 1, 2026

CVE-2026-42500

CVE-2026-42500

Description

Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

21

Golang/Goinferred
osv-coords20 versions
pkg:apk/chainguard/cg pkg:apk/chainguard/chainctl pkg:apk/chainguard/chainctl-fips pkg:apk/chainguard/gatus pkg:apk/chainguard/gatus-fips pkg:apk/chainguard/gitlab-workhorse-ce-18.10 pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.10 pkg:apk/chainguard/glab pkg:apk/chainguard/seaweedfs pkg:apk/chainguard/seaweedfs-fips pkg:apk/chainguard/seaweedfs-operator pkg:apk/chainguard/seaweedfs-operator-fips pkg:apk/chainguard/seaweedfs-rocksdb pkg:apk/chainguard/seaweedfs-rocksdb-fips pkg:apk/chainguard/tailscale pkg:apk/wolfi/gatus pkg:apk/wolfi/glab pkg:apk/wolfi/seaweedfs pkg:apk/wolfi/tailscale pkg:rpm/opensuse/rclone&distro=openSUSE%20Tumbleweed
< 0+ 19 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 4.34-r1
- (no CPE)range: < 4.34-r1
- (no CPE)range: < 1.0.26-r1
- (no CPE)range: < 1.0.26-r1
- (no CPE)range: < 4.34-r1
- (no CPE)range: < 4.34-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 4.34-r1
- (no CPE)range: < 0
- (no CPE)range: < 1.74.2-1.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.