VulnerableCode Package Details - pkg:deb/debian/golang-golang-x-image@0.11.0-1?distro=trixie

Search for packages

Vulnerability	Summary	Fixed by
This package is not known to be affected by vulnerabilities.

Vulnerability

Summary

Fixed by

This package is not known to be affected by vulnerabilities.

Vulnerability	Summary	Aliases
VCID-2uqz-va31-ubhz	Golang TIFF decoder vulnerable to excessive CPU consumption A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.	CVE-2023-29407 GHSA-j3p8-6mrq-6g7h
VCID-h16m-x9wr-7yem	Golang TIFF decoder does not place a limit on the size of compressed tile data The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height, and encoded size) to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU.	CVE-2023-29408 GHSA-x92r-3vfx-4cv3

Vulnerability

Summary

Aliases

VCID-2uqz-va31-ubhz

Golang TIFF decoder vulnerable to excessive CPU consumption A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.

CVE-2023-29407
GHSA-j3p8-6mrq-6g7h

VCID-h16m-x9wr-7yem

Golang TIFF decoder does not place a limit on the size of compressed tile data The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height, and encoded size) to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU.

CVE-2023-29408
GHSA-x92r-3vfx-4cv3

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-17T22:43:18.157063+00:00	Debian Importer	Fixing	VCID-h16m-x9wr-7yem	https://security-tracker.debian.org/tracker/data/json	38.4.0
2026-04-17T22:43:18.108101+00:00	Debian Importer	Fixing	VCID-2uqz-va31-ubhz	https://security-tracker.debian.org/tracker/data/json	38.4.0
2026-04-12T17:49:20.107741+00:00	Debian Importer	Fixing	VCID-h16m-x9wr-7yem	https://security-tracker.debian.org/tracker/data/json	38.3.0
2026-04-12T17:49:20.031534+00:00	Debian Importer	Fixing	VCID-2uqz-va31-ubhz	https://security-tracker.debian.org/tracker/data/json	38.3.0
2026-04-03T07:25:46.589926+00:00	Debian Importer	Fixing	VCID-h16m-x9wr-7yem	https://security-tracker.debian.org/tracker/data/json	38.1.0
2026-04-03T07:25:46.537499+00:00	Debian Importer	Fixing	VCID-2uqz-va31-ubhz	https://security-tracker.debian.org/tracker/data/json	38.1.0