CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size. |
| 25/06/2026 |
| CVE-2026-46599 | 高危7.5 | The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data. | 29/05/2026 |
| CVE-2026-42500 | 中危5.3 | Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image. | 29/05/2026 |
| CVE-2026-33813 | 高危7.5 | Parsing a WEBP image with an invalid, large size panics on 32-bit platforms. | 21/04/2026 |
| CVE-2026-33812 | 中危6.1 | Parsing a malicious font file can cause excessive memory allocation. | 21/04/2026 |
| CVE-2026-33809 | 中危5.3 | A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error. | 25/03/2026 |
| CVE-2024-24792 | 高危7.5 | Parsing a corrupt or malicious image with invalid color indices can cause a panic. | 27/06/2024 |
| CVE-2023-29408 | 中危6.5 | The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height, and encoded size) to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU. | 02/08/2023 |
| CVE-2023-29407 | 中危6.5 | A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero. | 02/08/2023 |
| CVE-2022-41727 | 中危5.5 | An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service. | 28/02/2023 |