GHSA-q7pp-wcgr-pffxLow

Crash when processing crafted TIFF files

Published
September 5, 2023
Last Modified
March 21, 2024

🔗 CVE IDs covered (1)

CVE-2023-36308 →

📋 Description

Disintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Grayscale call) via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence

🎯 Affected products1

  • go/github.com/disintegration/imaging:<= 1.6.2

🔗 References (4)