CVE-2026-46604
Published Jun 26, 2026The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.
- evidence mentions
- 3
- Buzz score
- 23.9
Vendor/product archive
golang / tiff CVEs
Beta · best-effort3 CVEs tagged to golang / tiff — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2026-33809
Published Mar 25, 2026A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error.
- evidence mentions
- 3
- Buzz score
- 23.9
CVE-2022-41727
Published Feb 28, 2023An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service.
Showing 1-3 of 3 CVEsPage 1 of 1