Skip to content

Known vulnerabilities in golang.org/x/image/tiff

Is your version affected?

CVE Summary Score Published
CVE-2026-46604 The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset 7.5 High Jun 26, 2026
CVE-2026-46602 The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image… 7.5 High Jun 25, 2026
CVE-2026-46599 The TIFF decoder does not place a limit on the size of PackBits-compressed data 7.5 High May 29, 2026
CVE-2026-33809 A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either… 5.3 Medium Mar 25, 2026
CVE-2024-24792 Parsing a corrupt or malicious image with invalid color indices can cause a panic 7.5 High Jun 27, 2024
CVE-2023-29407 A maliciously-crafted image can cause excessive CPU consumption in decoding Not rated Aug 2, 2023
CVE-2023-29408 The TIFF decoder does not place a limit on the size of compressed tile data Not rated Aug 2, 2023
CVE-2022-41727 An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to… Not rated Feb 28, 2023

Other golang.org/x/image products