Golang.Org/X/Image/Tiff
Approved changes feed: RSS · Atom
cpe:2.3:a:golang.org/x/image:golang.org/x/image/tiff:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Golang.Org/X/Image (690b5063-6488-5b0c-99b1-e8891419fc20) |
|---|---|
| Product | Golang.Org/X/Image/Tiff (06bae3ac-8a60-564a-8c37-f3f8295a699c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-46604 |
vulnerable | 2026-07-29 00:54:59.057445 |
Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image
The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.
Published: 2026-06-26T20:22:46.377Z
Updated: 2026-06-29T13:20:23.731Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46602 |
vulnerable | 2026-07-29 00:54:59.057320 |
Lack of limit on tile sizes in x/image/tiff in golang.org/x/image
The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption.
Published: 2026-06-25T19:47:21.690Z
Updated: 2026-06-26T16:07:00.792Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46599 |
vulnerable | 2026-06-08 08:05:12.102593 |
Excessive resource consumption in PackBits decompression in golang.org/x/image/tiff
The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data.
Published: 2026-05-29T19:35:33.539Z
Updated: 2026-06-01T14:44:03.725Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33809 |
vulnerable | 2026-06-08 07:59:11.248921 |
OOM from malicious IFD offset in golang.org/x/image/tiff
A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error.
Published: 2026-03-25T18:24:04.222Z
Updated: 2026-04-06T21:12:56.092Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24792 |
vulnerable | 2026-06-08 06:29:41.772863 |
Panic when parsing invalid palette-color images in golang.org/x/image
Parsing a corrupt or malicious image with invalid color indices can cause a panic.
Published: 2024-06-27T17:37:38.560Z
Updated: 2024-08-01T23:28:12.747Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29408 |
vulnerable | 2026-06-08 06:02:40.127330 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29407 |
vulnerable | 2026-06-08 06:02:40.125981 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41727 |
vulnerable | 2026-06-08 05:48:30.871732 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.