CVE-2026-33813 Parsing a WEBP image with an invalid, large size panics on 32-bit platforms

Description

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
golang.org/x/image/webp 0.42	premières → < 0.42.0	0.42.0

Autres CVE de golang.org/x/image/webp

Les 2 CVE de golang.org/x/image/webp →

CVE-2026-46601 The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size 7.5 Élevée