Golang Image vulnerabilities

• golang image, golang.org/x/image golang.org/x/image/font/sfnt +1 more Excessive memory allocation when decoding malicious SFNT in golang.org/x/image CVE-2026-33812 Fix available 6.1 MediumApril 21, 2026
• golang image, golang.org/x/image golang.org/x/image/webp +1 more Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image CVE-2026-33813 Fix available 7.5 HighApril 21, 2026
• golang image, golang.org/x/image golang.org/x/image/tiff +1 more Panic when parsing invalid palette-color images in golang.org/x/image CVE-2024-24792 Fix available 7.5 HighJune 25, 2024
• golang image, golang.org/x/image golang.org/x/image/tiff, fedoraproject fedora +2 more Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff CVE-2023-29407 Fix available 6.5 MediumAugust 2, 2023
• golang image, golang.org/x/image golang.org/x/image/tiff, fedoraproject fedora +2 more Excessive resource consumption in golang.org/x/image/tiff CVE-2023-29408 Fix available 6.5 MediumAugust 2, 2023
• golang image, tiff, golang.org/x/image golang.org/x/image/tiff +1 more +3 more Denial of service via crafted TIFF image in golang.org/x/image/tiff CVE-2022-41727 Fix available 5.5 MediumFebruary 16, 2023