Image
by Golang
Source repositories
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-33813 | Hig | 0.42 | 7.5 | 0.00 | Apr 21, 2026 | Parsing a WEBP image with an invalid, large size panics on 32-bit platforms. | ||
| CVE-2023-29408 | Med | 0.42 | 6.5 | 0.01 | Aug 2, 2023 | The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height, and encoded size) to make the decoder decode large amounts of compressed data, consuming… | ||
| CVE-2023-29407 | Med | 0.42 | 6.5 | 0.01 | Aug 2, 2023 | A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero. | ||
| CVE-2022-41727 | Med | 0.36 | 5.5 | 0.00 | Feb 28, 2023 | An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service. | ||
| CVE-2026-33812 | Med | 0.33 | 6.1 | 0.00 | Apr 21, 2026 | Parsing a malicious font file can cause excessive memory allocation. |
- risk 0.42cvss 7.5epss 0.00
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.
- risk 0.42cvss 6.5epss 0.01
The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height, and encoded size) to make the decoder decode large amounts of compressed data, consuming…
- risk 0.42cvss 6.5epss 0.01
A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.
- risk 0.36cvss 5.5epss 0.00
An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service.
- risk 0.33cvss 6.1epss 0.00
Parsing a malicious font file can cause excessive memory allocation.