CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size. |
| 25/06/2026 |
| CVE-2026-46599 | 높음7.5 | The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data. | 29/05/2026 |
| CVE-2026-42500 | 보통5.3 | Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image. | 29/05/2026 |
| CVE-2026-33813 | 높음7.5 | Parsing a WEBP image with an invalid, large size panics on 32-bit platforms. | 21/04/2026 |
| CVE-2026-33812 | 보통6.1 | Parsing a malicious font file can cause excessive memory allocation. | 21/04/2026 |
| CVE-2026-33809 | 보통5.3 | A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error. | 25/03/2026 |
| CVE-2024-24792 | 높음7.5 | Parsing a corrupt or malicious image with invalid color indices can cause a panic. | 27/06/2024 |
| CVE-2023-29408 | 보통6.5 | The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height, and encoded size) to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU. | 02/08/2023 |
| CVE-2023-29407 | 보통6.5 | A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero. | 02/08/2023 |
| CVE-2022-41727 | 보통5.5 | An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service. | 28/02/2023 |