Security
فارسی
All products

golang.org/x/image

Go · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Panic when reading out of bound palette index in golang.org/x/image/bmpCVE-2026-42500 · GO-2026-5031 golang.org/x/imageRed Hat Hardened Images/golang1.25 GoRed Hat Medium Fix reported
Excessive memory allocation when decoding malicious SFNT in golang.org/x/imageCVE-2026-33812 · GO-2026-4962 golang.org/x/imageCryostat 4/cryostat/cryostat-storage-rhel9 GoRed Hat Medium Fix reported
golang.org/x/image/tiff has excessive resource consumption in PackBits decompressionCVE-2026-46599 · GHSA-Q675-QJ96-32M9Version ranges need review. golang.org/x/imageLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator GoRed Hat High Fix reported
Go Images vulnerable to an out-of-memory error via a crafted TIFF fileCVE-2026-33809 · GHSA-44P7-9XX4-HF2GVersion ranges need review. golang.org/x/imageCryostat 4/cryostat/cryostat-storage-rhel9 GoRed Hat Medium Fix reported
Panic when parsing invalid palette-color images in golang.org/x/imageCVE-2024-24792 · GHSA-9PHM-FM57-RHG8Version ranges need review. golang.org/x/image Go High Fix reported
Excessive memory allocation during VP8L decoding in golang.org/x/imageCVE-2026-46603 · GO-2026-6222 golang.org/x/imageCryostat 4/cryostat/cryostat-storage-rhel9 GoRed Hat High Fix reported
Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/imageCVE-2026-46604 · GO-2026-5066 golang.org/x/imageOpenShift Serverless/openshift-serverless-1/kn-plugin-event-sender-rhel9 GoRed Hat Medium Fix reported
Lack of limit on tile sizes in x/image/tiff in golang.org/x/imageCVE-2026-46602 · GO-2026-5062 golang.org/x/imageCryostat 4/cryostat/cryostat-storage-rhel9 GoRed Hat Medium Fix reported
Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/imageCVE-2026-46601 · GO-2026-5061 golang.org/x/image Go Unknown Fix reported
Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/imageCVE-2026-33813 · GO-2026-4961 golang.org/x/imageOpenShift Serverless/openshift-serverless-1/kn-plugin-event-sender-rhel9 GoRed Hat Medium Fix reported
Golang TIFF decoder does not place a limit on the size of compressed tile dataCVE-2023-29408 · GHSA-X92R-3VFX-4CV3Version ranges need review. golang.org/x/imageRed Hat Advanced Cluster Management for Kubernetes 2/acm-cluster-templates-operator-container GoRed Hat Medium Fix reported
Golang TIFF decoder vulnerable to excessive CPU consumptionCVE-2023-29407 · GHSA-J3P8-6MRQ-6G7HVersion ranges need review. golang.org/x/imageRed Hat Advanced Cluster Management for Kubernetes 2/acm-cluster-templates-operator-container GoRed Hat Medium Fix reported
Uncontrolled Resource Consumption in golang.org/x/imageCVE-2022-41727 · GHSA-QGC7-MGM3-Q253Version ranges need review. golang.org/x/image Go Medium Fix reported