The TIFF decoder can panic when decoding an invalid image containing an out-of-bounds strip offset. This was fixed by https://go.dev/cl/788421, creating an issue for tracking purposes.
Thanks to sorte for reporting this issue.
This is a PUBLIC track vulnerability and CVE-2026-46604.
The TIFF decoder can panic when decoding an invalid image containing an out-of-bounds strip offset. This was fixed by https://go.dev/cl/788421, creating an issue for tracking purposes.
Thanks to sorte for reporting this issue.
This is a PUBLIC track vulnerability and CVE-2026-46604.