VDB
GO-2023-1990
GO-2023-1990
PUBLISHED
Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| golang.org | x/image | 0, 0 |
Timeline
- Aug 2, 2023 CVE Published
- May 20, 2024 CVE Updated
References
- https://go.dev/issue/61581 report
- https://go.dev/cl/514897 patch