5.3
Medium
CVE-2026-42500 Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the…
Description
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| golang.org/x/image/bmp 0.41 | earliest → < 0.41.0 | 0.41.0 |