Go standard library

Records298All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical34CVSS 9.0–10.0

CVSS high164CVSS 7.0–8.9

Exploited now

Go standard library records in CISA KEV

TI-2023-23979 HTTP/2 Rapid Reset Attack Vulnerability CRITICAL 90KEV 2023-10-10 TI-2020-00578 Microsoft Windows CryptoAPI Spoofing Vulnerability CRITICAL 94KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Go 171 records CRITICAL Crypto 21 records HIGH Net 12 records MEDIUM Http2 5 records CRITICAL Image 5 records LOW Text 4 records MEDIUM Ssh 3 records MEDIUM Tiff 3 records MEDIUM

Records

3 records in Tiff · all components

TI-2026-34263 CVE-2026-46604

Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image

MEDIUM 40

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00609 Published 2026-06-26 Partial fix · 0.43.0 CWE-787

TI-2026-26181 CVE-2026-33809 · GHSA-44p7-9xx4-hf2g

OOM from malicious IFD offset in golang.org/x/image/tiff

LOW 30

A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00334 Published 2026-03-25 Partial fix · 0.38.0 CWE-434

TI-2022-20117 CVE-2022-41727 · GHSA-qgc7-mgm3-q253

Denial of service via crafted TIFF image in golang.org/x/image/tiff

LOW 25

An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00306 Published 2023-02-28 Fixed in 0.5.0 CWE-770

Open these records in search →

Critical	34
High	164
Medium	96
Low	4
No CVSS	0