Go/golang.org/x/image CVE-2024-24792: unknown, EPSS 0.73%

Panic when parsing invalid palette-color images in golang.org/x/image

Action: Upgrade golang.org/x/image to 0.18.0 or later.

go get golang.org/x/image@v0.18.0

Affected

Fixed versions

Sources

• osv: GO-2024-2937
• https://go.dev/cl/588115
• https://go.dev/issue/67624

CVE-2024-24792 · published 2024-06-25T22:06:09Z · modified 2026-02-04T03:54:25.251608Z · JSON