CVE-2026-33813
Published Apr 21, 2026Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.
- evidence mentions
- 4
- Buzz score
- 26.1
Vendor/product archive
5 CVEs tagged to golang / image — 0 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.
Parsing a malicious font file can cause excessive memory allocation.
The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/heig…
A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite t…
An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service.