High severity7.5NVD Advisory· Published Aug 14, 2026· Updated Sep 3, 2026
CVE-2026-46603
CVE-2026-46603
Description
VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups. This allows a remote attacker to cause a denial of service via memory exhaustion.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
96- osv-coords94 versionspkg:apk/chainguard/mattermost-11.5pkg:apk/chainguard/mattermost-fips-11.7pkg:apk/wolfi/mattermost-11.7pkg:apk/wolfi/tailscalepkg:apk/chainguard/rclonepkg:apk/chainguard/ollama-fipspkg:apk/chainguard/mailpit-fipspkg:apk/chainguard/mattermost-10.11pkg:apk/chainguard/teleport-18pkg:apk/wolfi/rclonepkg:apk/chainguard/gatuspkg:apk/chainguard/gitlab-workhorse-ce-fips-18.6pkg:apk/chainguard/gitlab-workhorse-ce-fips-19.1pkg:apk/chainguard/gitlab-workhorse-ce-fips-19.3pkg:apk/chainguard/hugopkg:rpm/opensuse/rclone&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2016.0pkg:apk/chainguard/bentopkg:apk/chainguard/bento-fipspkg:apk/chainguard/fortio-fipspkg:apk/chainguard/giteapkg:apk/chainguard/gitea-fipspkg:apk/chainguard/gitlab-workhorse-ce-18.8pkg:apk/chainguard/gitlab-workhorse-ce-18.9pkg:apk/chainguard/gitlab-workhorse-ce-19.0pkg:apk/chainguard/gitlab-workhorse-ce-19.1pkg:apk/chainguard/gitlab-workhorse-ce-19.2pkg:apk/chainguard/gitlab-workhorse-ce-19.3pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.10pkg:apk/chainguard/hugo-fipspkg:apk/chainguard/kubescape-serverpkg:apk/chainguard/kubescape-server-downloaderpkg:apk/chainguard/kubescape-server-fipspkg:apk/chainguard/mailpitpkg:apk/chainguard/mattermost-11.8pkg:apk/chainguard/mattermost-fips-11.2pkg:apk/chainguard/mattermost-fips-11.5pkg:apk/chainguard/pdfcpupkg:apk/chainguard/kubescapepkg:apk/chainguard/kubescape-server-fips-downloaderpkg:apk/chainguard/listmonkpkg:apk/chainguard/ollamapkg:apk/chainguard/tailscalepkg:apk/wolfi/bentopkg:apk/wolfi/filebrowserpkg:apk/chainguard/kittypkg:apk/wolfi/hugopkg:apk/wolfi/gatuspkg:apk/chainguard/gitlab-workhorse-ce-fips-18.7pkg:apk/chainguard/mattermost-fips-11.8pkg:apk/chainguard/mattermost-11.6pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.9pkg:apk/chainguard/gitlab-workhorse-ce-18.10pkg:apk/chainguard/gitlab-workhorse-ce-18.11pkg:apk/chainguard/gitlab-workhorse-ce-18.6pkg:apk/chainguard/gitlab-workhorse-ce-18.7pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.8pkg:apk/chainguard/gitlab-workhorse-ce-fips-19.0pkg:apk/chainguard/gitlab-workhorse-ce-fips-19.2pkg:apk/chainguard/glabpkg:apk/chainguard/glab-fipspkg:apk/chainguard/hugo-extendedpkg:apk/chainguard/mattermost-11.4pkg:apk/chainguard/mattermost-11.7pkg:apk/chainguard/mattermost-fips-10.11pkg:apk/chainguard/mattermost-fips-11.4pkg:apk/chainguard/mattermost-fips-11.6pkg:apk/chainguard/nemopkg:apk/chainguard/rclone-fipspkg:apk/chainguard/seaweedfspkg:apk/chainguard/seaweedfs-operatorpkg:apk/chainguard/seaweedfs-operator-fipspkg:apk/chainguard/seaweedfs-rocksdbpkg:apk/chainguard/seaweedfs-rocksdb-fipspkg:apk/wolfi/giteapkg:apk/wolfi/glabpkg:apk/wolfi/hugo-extendedpkg:apk/wolfi/kittypkg:apk/wolfi/mailpitpkg:apk/wolfi/mattermost-11.4pkg:apk/wolfi/mattermost-11.5pkg:apk/wolfi/ollamapkg:apk/wolfi/pdfcpupkg:apk/wolfi/seaweedfspkg:apk/chainguard/seaweedfs-fipspkg:apk/chainguard/cgpkg:apk/chainguard/chainctlpkg:apk/chainguard/chainctl-fipspkg:apk/chainguard/filebrowserpkg:apk/chainguard/fortiopkg:apk/chainguard/gatus-fipspkg:apk/chainguard/gitlab-workhorse-ce-fips-18.11pkg:apk/wolfi/kubescapepkg:apk/wolfi/mattermost-11.6
< 11.5.7-r7+ 93 more
- (no CPE)range: < 11.5.7-r7
- (no CPE)range: < 11.7.9-r2
- (no CPE)range: < 11.7.9-r2
- (no CPE)range: < 0
- (no CPE)range: < 1.75.0-r2
- (no CPE)range: < 0.32.13-r1
- (no CPE)range: < 1.30.7-r2
- (no CPE)range: < 10.11.23-r2
- (no CPE)range: < 0
- (no CPE)range: < 1.75.0-r2
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.75.1-1.1
- (no CPE)range: < 0.0.20260827T195228-160000.1.1
- (no CPE)range: < 1.20.0-r2
- (no CPE)range: < 1.20.0-r2
- (no CPE)range: < 1.75.2-r4
- (no CPE)range: < 1.27.2-r1
- (no CPE)range: < 1.27.2-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 4.0.12-r2
- (no CPE)range: < 4.0.12-r2
- (no CPE)range: < 4.0.12-r2
- (no CPE)range: < 1.30.7-r2
- (no CPE)range: < 11.8.5-r1
- (no CPE)range: < 11.2.4-r13
- (no CPE)range: < 11.5.7-r9
- (no CPE)range: < 0.15.0-r2
- (no CPE)range: < 4.0.12-r2
- (no CPE)range: < 4.0.12-r2
- (no CPE)range: < 0
- (no CPE)range: < 0.32.14-r1
- (no CPE)range: < 0
- (no CPE)range: < 1.20.0-r2
- (no CPE)range: < 0
- (no CPE)range: < 0.48.2-r2
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 11.8.5-r2
- (no CPE)range: < 11.6.6-r9
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 11.4.5-r10
- (no CPE)range: < 11.7.9-r2
- (no CPE)range: < 10.11.23-r2
- (no CPE)range: < 11.4.5-r6
- (no CPE)range: < 11.6.6-r7
- (no CPE)range: < 2.7.3-r21
- (no CPE)range: < 1.75.0-r2
- (no CPE)range: < 4.41-r2
- (no CPE)range: < 1.0.34-r2
- (no CPE)range: < 1.0.34-r2
- (no CPE)range: < 4.40-r3
- (no CPE)range: < 4.41-r2
- (no CPE)range: < 1.27.2-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0.48.2-r2
- (no CPE)range: < 1.30.7-r2
- (no CPE)range: < 11.4.5-r10
- (no CPE)range: < 11.5.7-r7
- (no CPE)range: < 0.32.14-r1
- (no CPE)range: < 0.15.0-r2
- (no CPE)range: < 4.41-r2
- (no CPE)range: < 4.41-r2
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.75.2-r5
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 4.0.12-r2
- (no CPE)range: < 11.6.6-r9
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.