GHSA-q7pp-wcgr-pffx
Crash when processing crafted TIFF files
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/disintegration/imaging | <= 1.6.2 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Disintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Grayscale call) via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence
References
External links from the advisory. They lead to third-party sites.