Executive brief
Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff
Affected products
- Go golang.org/x/image
Junglewise Threat Intelligence
CVE-2023-29407: GO-2023-1990 - Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff
CVE-2023-29407 · Severity: low · CVSS 3.1 · Published 2023-08-02
Technologies: golang.org/x/image (Go). Vendors: Go.
Related threats
- GO-2026-6222 - Excessive memory allocation during VP8L decoding in golang.org/x/image
- Go x/image/tiff denial of service via out-of-bounds strip offset
- Go x/image/tiff unbounded memory consumption in TIFF decoder
- Go x/image/webp denial of service via mismatched VP8 dimensions
- Go x/image/tiff resource exhaustion in PackBits decompression