En resumen
- CVE-2023-29407 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a golang.org/x/image, image (golang).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.87%, mayor que el 58.9% de las vulnerabilidades.
- Solución: actualizar a 0.10.0 o posterior.
Description
A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.
NVD description
A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.
Más vulnerabilidades de golang.org/x/image
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free