Search for packages
| purl | pkg:deb/debian/golang-golang-x-image@0.32.0-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-4wx3-ary7-2be6 | Parsing a malicious font file can cause excessive memory allocation. |
CVE-2026-33812
|
| VCID-6vp5-c27t-zkhh | Parsing a WEBP image with an invalid, large size panics on 32-bit platforms. |
CVE-2026-33813
|
| VCID-yj5c-4wbb-gbcx | Go Images vulnerable to an out-of-memory error via a crafted TIFF file A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error. |
CVE-2026-33809
GHSA-44p7-9xx4-hf2g |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-05-02T03:07:52.126193+00:00 | Debian Importer | Fixing | VCID-yj5c-4wbb-gbcx | https://security-tracker.debian.org/tracker/data/json | 38.6.0 |
| 2026-05-02T01:32:31.156866+00:00 | Debian Importer | Fixing | VCID-6vp5-c27t-zkhh | https://security-tracker.debian.org/tracker/data/json | 38.6.0 |
| 2026-05-01T22:35:39.137077+00:00 | Debian Importer | Fixing | VCID-4wx3-ary7-2be6 | https://security-tracker.debian.org/tracker/data/json | 38.6.0 |
| 2026-04-24T10:33:33.162960+00:00 | Debian Importer | Fixing | VCID-4wx3-ary7-2be6 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-24T08:03:31.953817+00:00 | Debian Importer | Fixing | VCID-6vp5-c27t-zkhh | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T11:00:53.433329+00:00 | Debian Importer | Fixing | VCID-yj5c-4wbb-gbcx | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T07:28:34.274546+00:00 | Debian Importer | Fixing | VCID-yj5c-4wbb-gbcx | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-08T18:58:09.297436+00:00 | Debian Importer | Fixing | VCID-yj5c-4wbb-gbcx | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |