Описание
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| golang-golang-x-image | unfixed | package | ||
| golang-golang-x-image | no-dsa | trixie | package | |
| golang-golang-x-image | postponed | bookworm | package | |
| golang-golang-x-image | postponed | bullseye | package |
Примечания
https://github.com/golang/go/issues/79869
Fixed by: https://github.com/golang/image/commit/c5511df3ee92e86ce3fa383fdd247080019257c7 (v0.43.0)
Связанные уязвимости
CVSS3: 7.5
ubuntu
около 1 месяца назад
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.
CVSS3: 6.5
redhat
около 1 месяца назад
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.
CVSS3: 7.5
nvd
около 1 месяца назад
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.
CVSS3: 7.5
github
около 1 месяца назад
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.