Em resumo
- CVE-2023-29407 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta golang.org/x/image, image (golang).
- Chance de exploração nos próximos 30 dias (EPSS): 0.87%, maior que 58.9% das vulnerabilidades.
- Correção: atualize para 0.10.0 ou posterior.
Description
A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.
NVD description
A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.
Mais vulnerabilidades de golang.org/x/image
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free