What’s Vulnerable › Products

golang.org/x/image/webp vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your golang.org/x/image/webp version is affected

Latest golang.org/x/image/webp vulnerabilities

• CVE-2026-46601 — Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image (CVSS 7.5)
• CVE-2026-33813 — Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image (CVSS 7.5)
• CVE-2026-33812 — Excessive memory allocation when decoding malicious SFNT in golang.org/x/image (CVSS 6.1)
• CVE-2024-24792 — Panic when parsing invalid palette-color images in golang.org/x/image (CVSS 7.5)
• CVE-2023-29408 — Excessive resource consumption in golang.org/x/image/tiff (CVSS 6.5)
• CVE-2023-29407 — Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff (CVSS 6.5)
• CVE-2022-41727 — Denial of service via crafted TIFF image in golang.org/x/image/tiff (CVSS 5.5)