CVE-2022-41727

Denial of service via crafted TIFF image in golang.org/x/image/tiff

published February 28, 2023

CVSS
—
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Published
2023-02-28T17:19Z
EPSS history
Timeline
  • 28 FEB 17:19Z
    Denial of service via crafted TIFF image in golang.org/x/image/tiff
    cvelistv5