~ / search / GHSA-9phm-fm57-rhg8

GHSA-9phm-fm57-rhg8

Panic when parsing invalid palette-color images in golang.org/x/image

Source: GitHub Advisory Database (reviewed) High CVE-2024-24792

Packages

EcosystemPackageAffectedFixed in
Go golang.org/x/image < 0.18.0 0.18.0

Details

As written in the advisory (Markdown source, shown as plain text).

Parsing a corrupt or malicious image with invalid color indices can cause a panic.

References

External links from the advisory. They lead to third-party sites.