En resumen
- CVE-2026-46599 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a golang.org/x/image.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.35%, mayor que el 29.0% de las vulnerabilidades.
- Solución: actualizar a 0.41.0 o posterior.
Description
The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data.
NVD description
The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data.
Más vulnerabilidades de golang.org/x/image
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free