VDB
CVE-2026-33812
CVE-2026-33812
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Parsing a malicious font file can cause excessive memory allocation.
EPSS 0.01% · 2.2th percentile
Risk Scores
CVSS v3.1
6.099999904632568
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
EPSS Score
0.01%
2.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| golang.org/x/image | golang.org/x/image/font/sfnt | 0 |
Timeline
- Apr 21, 2026 CVE Published
- May 13, 2026 CVE Updated
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score
- May 25, 2026 EPSS Score
- May 26, 2026 EPSS Score
- May 27, 2026 EPSS Score