TI-2026-34263 CVE-2026-46604
Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image
Priority MEDIUM 40
The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.
Vulnerabilities
3 records
TI-2026-26181 CVE-2026-33809 · GHSA-44p7-9xx4-hf2g
OOM from malicious IFD offset in golang.org/x/image/tiff
Priority LOW 30
A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error.
TI-2022-20117 CVE-2022-41727 · GHSA-qgc7-mgm3-q253
Denial of service via crafted TIFF image in golang.org/x/image/tiff
Priority LOW 25
An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig.