GHSA-44p7-9xx4-hf2g
Go Images vulnerable to an out-of-memory error via a crafted TIFF file
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | golang.org/x/image | < 0.38.0 | 0.38.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error.
References
External links from the advisory. They lead to third-party sites.