TI
Product
Tiff
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Tiff to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-46604 | 7.5 | Jun 26 | Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image Affected: before 0.43.0 |
| CVE-2022-41727 | 5.5 | Feb 28 | An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig Affected: All versions, or not specified |
| CVE-2026-33809 | 5.3 | Mar 25 | OOM from malicious IFD offset in golang.org/x/image/tiff Affected: before 0.38.0 |
Showing 3