Vulnerability GO-2026-6222

Unknown

3 months ago

Excessive memory allocation during VP8L decoding in golang.org/x/image

<0.45.0

Summary

Excessive memory allocation during VP8L decoding in golang.org/x/image

Details

VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups. This allows a remote attacker to cause a denial of service via memory exhaustion.

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

High Risk

4 months ago

golang.org/x/image/tiff has excessive resource consumption in PackBits decompression

<0.41.0 GHSA-q675-qj96-32m9

Unknown

4 months ago

Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image

<0.43.0 GO-2026-5066

Unknown

4 months ago

Lack of limit on tile sizes in x/image/tiff in golang.org/x/image

<0.43.0 GO-2026-5062

Unknown

4 months ago

Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image

<0.43.0 GO-2026-5061

Unknown

5 months ago

Excessive resource consumption in PackBits decompression in golang.org/x/image/tiff

<0.41.0 GO-2026-5032

View all vulnerabilities for these packages

Impacted packages

golang.org/x/image

Timeline

Published

3 months ago

Fixed (v0.45.0)

3 months ago

Last Modified

3 months ago