Описание
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| golang-golang-x-image | fixed | 0.42.0-1 | package | |
| golang-golang-x-image | no-dsa | trixie | package | |
| golang-golang-x-image | postponed | bookworm | package | |
| golang-golang-x-image | no-dsa | bullseye | package |
Примечания
https://github.com/golang/go/issues/79576
https://go-review.googlesource.com/c/image/+/781500
Fixed by: https://github.com/golang/image/commit/0d61147654dcd60265f4bfa72e5f66f578630e22 (v0.41.0)
Связанные уязвимости
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.
