VDB
GO-2024-2937
GO-2024-2937
PUBLISHED
Panic when parsing invalid palette-color images in golang.org/x/image
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | ollama | 0 |
| chainguard | hugo | 0 |
| chainguard | gotenberg | 0 |
| golang.org | x/image | 0 |
| chainguard | chainctl | 0 |
| wolfi | ollama | 0 |
| chainguard | hugo-extended | 0 |
| wolfi | hugo-extended | 0 |
| wolfi | hugo | 0 |
Timeline
- Jun 25, 2024 CVE Published
- Feb 4, 2026 CVE Updated
References
- https://go.dev/issue/67624 report
- https://go.dev/cl/588115 patch