CVE Intelligence

Golang.org/x/image Golang.org/x/image/webp vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Golang.org/x/image Golang.org/x/image/webp: 2 record(s), with affected versions and fixes.

CVE-2026-46601 High · 7.5 Jun 25, 2026
Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.
CVE-2026-33813 High · 7.5 Apr 21, 2026
Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.