Back to overview

CVE-2026-46604

Description
The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.

Metadata

CVE ID
CVE-2026-46604
State
PUBLISHED
Assigner
Go
Reserved
2026-05-15 17:35 UTC
Published
2026-06-26 20:22 UTC
Last updated
2026-06-26 20:22 UTC
Vendor / Product
golang.org/x/image / golang.org/x/image/tiff
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (1)
VendorProductPlatformVersions
golang.org/x/image golang.org/x/image/tiff 0 < 0.43.0
Weakness (CWE)
CWESourceDescription
cna CWE-125: Out-of-bounds Read
Back to overview