GO
Vendor
golang.org/x/image
9
CVEs
0
On KEV
0
New 30D
Products
GO7.5
golang.org/x/image/tiff
golang.org/x/image
4 CVEs0 on KEV0 new
GO7.5
golang.org/x/image/webp
golang.org/x/image
2 CVEs0 on KEV0 new
GO5.3
golang.org/x/image/bmp
golang.org/x/image
1 CVEs0 on KEV0 new
GO6.1
golang.org/x/image/font/sfnt
golang.org/x/image
1 CVEs0 on KEV0 new
GO7.5
golang.org/x/image/vp8l
golang.org/x/image
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-46603 | GO golang.org/x/image/vp8l golang.org/x/image | 7.5 | Aug 14 | Excessive memory allocation during VP8L decoding in golang.org/x/image |
| CVE-2026-46604 | GO golang.org/x/image/tiff golang.org/x/image | 7.5 | Jun 26 | Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image |
| CVE-2026-46602 | GO golang.org/x/image/tiff golang.org/x/image | 7.5 | Jun 25 | Lack of limit on tile sizes in x/image/tiff in golang.org/x/image |
| CVE-2026-46601 | GO golang.org/x/image/webp golang.org/x/image | 7.5 | Jun 25 | Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image |
| CVE-2026-46599 | GO golang.org/x/image/tiff golang.org/x/image | 7.5 | May 29 | Excessive resource consumption in PackBits decompression in golang.org/x/image/tiff |
| CVE-2026-42500 | GO golang.org/x/image/bmp golang.org/x/image | 5.3 | May 29 | Panic when reading out of bound palette index in golang.org/x/image/bmp |
| CVE-2026-33812 | GO golang.org/x/image/font/sfnt golang.org/x/image | 6.1 | Apr 21 | Excessive memory allocation when decoding malicious SFNT in golang.org/x/image |
| CVE-2026-33813 | GO golang.org/x/image/webp golang.org/x/image | 7.5 | Apr 21 | Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image |
| CVE-2026-33809 | GO golang.org/x/image/tiff golang.org/x/image | 5.3 | Mar 25 | OOM from malicious IFD offset in golang.org/x/image/tiff |