CVE-2022-41727
EUVD-2023-077628.02.2023, 18:15
An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| golang | image | 𝑥 < 0.5.0 |
| golang | tiff | - |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References