CVE-2026-46604

Description

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.

Affected products

• golang.org/x/image / golang.org/x/image/tiff0 – 0.43.0

References

• MISChttps://go.dev/cl/788421
• MISChttps://go.dev/issue/80122
• MISChttps://pkg.go.dev/vuln/GO-2026-5066