high7.5
CVE-2024-24792
Panic when parsing invalid palette-color images in golang.org/x/image
Impact
Parsing a corrupt or malicious image with invalid color indices can cause a panic.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | golang.org/x/image | < 0.18.0 | 0.18.0 |