TIFF images may be tiled. Tiles may be larger than the image size. x/image/tiff currently doesn't validate tile sizes, which can allow a malicious or corrupt input to consume excessive memory or crash, even when the user validates the image size.
We should set some reasonable limit on how much larger than the image the tile size may be.
This is a PUBLIC track vulnerability and CVE-2026-46602.
TIFF images may be tiled. Tiles may be larger than the image size. x/image/tiff currently doesn't validate tile sizes, which can allow a malicious or corrupt input to consume excessive memory or crash, even when the user validates the image size.
We should set some reasonable limit on how much larger than the image the tile size may be.
This is a PUBLIC track vulnerability and CVE-2026-46602.