CVE-2023-29407

Published: Aug 2, 2023

Modified: Feb 13, 2025

PUBLISHED

Description

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.

Vendor	Product	Versions
golang.org/x/image	golang.org/x/image/tiff	affected `0 - < 0.10.0`

References

https://go.dev/issue/61581

https://go.dev/cl/514897

https://pkg.go.dev/vuln/GO-2023-1990

https://security.netapp.com/advisory/ntap-20230831-0009/

https://lists.fedoraproject.org/archives/list/[email protected]/message/KO54NBDUJXKAZNGCFOEYL2LKK2RQP6K6/

https://lists.fedoraproject.org/archives/list/[email protected]/message/XWH6Q7NVM4MV3GWFEU4PA67AWZHVFJQ2/

https://lists.fedoraproject.org/archives/list/[email protected]/message/XZTEP6JYILRBNDTNWTEQ5D4QUUVQBESK/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-29407

Description

Affected Products

References