Golang.org/x/image vulnerabilities
We track 2 vulnerabilities in Golang.org/x/image products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 14, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Golang.org/x/image vulnerabilities
- 7.5 High severity
golang.org/x/image/vp8l: Memory Allocation with Excessive Size Value
VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups. This allows a remote attacker to cause a denial of service via memory exhaustion.
- 7.5 High severity
golang.org/x/image/tiff: Allocation of Resources Without Limits or Throttling
The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed d