golang.org/x/image golang.org/x/image/tiff
8 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-46604 | < 0.43.0 | Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image | HIGH 7.5 | 0.6 % | ||
| CVE-2026-46602 | < 0.43.0 | Lack of limit on tile sizes in x/image/tiff in golang.org/x/image | HIGH 7.5 | 0.6 % | ||
| CVE-2026-46599 | < 0.41.0 | Excessive resource consumption in PackBits decompression in golang.org/x/image/tiff | HIGH 7.5 | 0.4 % | ||
| CVE-2026-33809 | < 0.38.0 | OOM from malicious IFD offset in golang.org/x/image/tiff | MEDIUM 5.3 | 0.3 % | ||
| CVE-2024-24792 | < 0.18.0 | Panic when parsing invalid palette-color images in golang.org/x/image | HIGH 7.5 | 0.7 % | ||
| CVE-2023-29407 | < 0.10.0 | Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff | MEDIUM 6.5 | 0.9 % | ||
| CVE-2023-29408 | < 0.10.0 | Excessive resource consumption in golang.org/x/image/tiff | MEDIUM 6.5 | 0.9 % | ||
| CVE-2022-41727 | < 0.5.0 | Denial of service via crafted TIFF image in golang.org/x/image/tiff | MEDIUM 5.5 | 0.3 % |