View all vulnerabilities

CVE-2023-29407

Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff

A maliciously-crafted image can cause excessive CPU consumption in decoding.A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading
Vulnerability Details
Score
Score Vector
Affected Versions
golang.org/x/image < 0.10.0
Severity
Ecosystem
GO
Publish Date
August 2, 2023
Modified Date
May 20, 2024