medium5.3
CVE-2026-33809
A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-m…
Impact
A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | golang.org/x/image | < 0.38.0 | 0.38.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Golang | Tiff | before 0.38.0 |