Approved changes feed: RSS · Atom

cpe:2.3:a:golang.org/x/image:golang.org/x/image/webp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGolang.Org/X/Image (690b5063-6488-5b0c-99b1-e8891419fc20)
ProductGolang.Org/X/Image/Webp (86054c80-003f-5782-9b34-83e1d8261e76)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-46601 vulnerable 2026-07-29 00:54:59.057018 Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.
Published: 2026-06-25T19:47:21.500Z
Updated: 2026-06-26T16:09:18.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33813 vulnerable 2026-06-08 07:59:11.257220 Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.
Published: 2026-04-21T19:21:27.644Z
Updated: 2026-06-25T19:47:15.561Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.