GO
Product
golang.org/x/image/tiff
8
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add golang.org/x/image/tiff to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-46604 | 7.5 | Jun 26 | Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image Affected: before 0.43.0 |
| CVE-2026-46602 | 7.5 | Jun 25 | Lack of limit on tile sizes in x/image/tiff in golang.org/x/image Affected: before 0.43.0 |
| CVE-2026-46599 | 7.5 | May 29 | Excessive resource consumption in PackBits decompression in golang.org/x/image/tiff Affected: before 0.41.0 |
| CVE-2024-24792 | 7.5 | Jun 27 | Panic when parsing invalid palette-color images in golang.org/x/image Affected: before 0.18.0 |
| CVE-2023-29407 | 6.5 | Aug 2 | Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff Affected: before 0.10.0 |
| CVE-2023-29408 | 6.5 | Aug 2 | Excessive resource consumption in golang.org/x/image/tiff Affected: before 0.10.0 |
| CVE-2022-41727 | 5.5 | Feb 28 | Denial of service via crafted TIFF image in golang.org/x/image/tiff Affected: before 0.5.0 |
| CVE-2026-33809 | 5.3 | Mar 25 | OOM from malicious IFD offset in golang.org/x/image/tiff Affected: before 0.38.0 |
Showing 8