Описание
The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| golang-golang-x-image | unfixed | package | ||
| golang-golang-x-image | no-dsa | trixie | package | |
| golang-golang-x-image | postponed | bookworm | package | |
| golang-golang-x-image | postponed | bullseye | package |
Примечания
https://github.com/golang/go/issues/80122
Fixed by: https://github.com/golang/image/commit/7c04344368b6bcc71df693702522f4f03af45250 (v0.43.0)
EPSS
Процентиль: 27%
0.00342
Низкий
Связанные уязвимости
CVSS3: 7.5
ubuntu
около 2 месяцев назад
The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.
CVSS3: 7.5
nvd
около 2 месяцев назад
The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.
EPSS
Процентиль: 27%
0.00342
Низкий