Executive brief
Panic when parsing invalid palette-color images in golang.org/x/image
Affected products
- Go golang.org/x/image
Junglewise Threat Intelligence
CVE-2024-24792: GO-2024-2937 - Panic when parsing invalid palette-color images in golang.org/x/image
CVE-2024-24792 · Severity: low · CVSS 3.1 · Published 2024-06-25
Technologies: golang.org/x/image (Go). Vendors: Go.
Related threats
- GO-2026-6222 - Excessive memory allocation during VP8L decoding in golang.org/x/image
- Go x/image/tiff denial of service via out-of-bounds strip offset
- Go x/image/tiff unbounded memory consumption in TIFF decoder
- Go x/image/webp denial of service via mismatched VP8 dimensions
- Go x/image/tiff resource exhaustion in PackBits decompression