CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size. |
| 25/06/2026 |
| CVE-2026-46599 | ALTO7.5 | The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data. | 29/05/2026 |
| CVE-2026-42500 | MEDIO5.3 | Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image. | 29/05/2026 |
| CVE-2026-33813 | ALTO7.5 | Parsing a WEBP image with an invalid, large size panics on 32-bit platforms. | 21/04/2026 |
| CVE-2026-33812 | MEDIO6.1 | Parsing a malicious font file can cause excessive memory allocation. | 21/04/2026 |
| CVE-2026-33809 | MEDIO5.3 | A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error. | 25/03/2026 |
| CVE-2024-24792 | ALTO7.5 | Parsing a corrupt or malicious image with invalid color indices can cause a panic. | 27/06/2024 |
| CVE-2023-29408 | MEDIO6.5 | The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height, and encoded size) to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU. | 02/08/2023 |
| CVE-2023-29407 | MEDIO6.5 | A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero. | 02/08/2023 |
| CVE-2022-41727 | MEDIO5.5 | An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service. | 28/02/2023 |