Skip to main content
cve.nowby Sazabi
← Go
GoPackage

golang.org/x/image/tiff

8 known vulnerabilities (4 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
8 · 4 high, 1 medium
Registry
pkg.go.dev

Advisories 8

  • Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image

    Affected: fixed in 0.43.0.

  • Lack of limit on tile sizes in x/image/tiff in golang.org/x/image

    Affected: fixed in 0.43.0.

  • Excessive resource consumption in PackBits decompression in golang.org/x/image/tiff

    Affected: fixed in 0.41.0.

  • CVE-2026-33809Medium 5.3

    OOM from malicious IFD offset in golang.org/x/image/tiff

    Affected: fixed in 0.38.0.

  • Panic when parsing invalid palette-color images in golang.org/x/image

    Affected: fixed in 0.18.0.

  • Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff

    Affected: fixed in 0.10.0.

  • Excessive resource consumption in golang.org/x/image/tiff

    Affected: fixed in 0.10.0.

  • Denial of service via crafted TIFF image in golang.org/x/image/tiff

    Affected: fixed in 0.5.0.