GitHub Advisoryadvisory · Go

GHSA-9phm-fm57-rhg8 Panic when parsing invalid palette-color images in golang.org/x/image

HIGH Published 2024-06-26 Modified 2024-08-02 Official page ↗
Aliases
CVE-2024-24792
Ecosystem
Go
Packages
golang.org/x/image
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-248
Reviewed
2024-06-26

Affected packages

• Go golang.org/x/image: < 0.18.0 → fixed in 0.18.0

Description

Parsing a corrupt or malicious image with invalid color indices can cause a panic.

Related

Alias · CVE (1)

  • CVE-2024-24792 Parsing a corrupt or malicious image with invalid color indices can cause a panic. vulnerability

Weakness · CWE (1)

  • CWE-248 Uncaught Exception weakness

References