GHSA-j3p8-6mrq-6g7h
GitHub Security Advisory
Golang TIFF decoder vulnerable to excessive CPU consumption
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.
Affected Packages
Go
golang.org/x/image
Affected versions:
0
(fixed in 0.10.0)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: July 19, 2025 6:27 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.