~ / search / GHSA-qgc7-mgm3-q253

GHSA-qgc7-mgm3-q253

Uncontrolled Resource Consumption in golang.org/x/image

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-41727

Packages

EcosystemPackageAffectedFixed in
Go golang.org/x/image < 0.5.0 0.5.0

Details

As written in the advisory (Markdown source, shown as plain text).

An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service.

References

External links from the advisory. They lead to third-party sites.