VULNERABILITY INTELLIGENCE
CVE-2026-33809
CVSS score5.3 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2026-03-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error.
Weakness classification
- nvd@nist.gov: CWE-434
Primary references
- security@golang.org — Mailing List
- security@golang.org — Issue Tracking
- security@golang.org — Vendor Advisory