Go/golang.org/x/image CVE-2023-29407: unknown, EPSS 0.87%

Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff

Action: Upgrade golang.org/x/image to 0.10.0 or later.

go get golang.org/x/image@v0.10.0

Affected

Fixed versions

Sources

• osv: GO-2023-1990
• https://go.dev/issue/61581
• https://go.dev/cl/514897

CVE-2023-29407 · published 2023-08-02T15:06:21Z · modified 2024-05-20T16:03:47Z · JSON