PT-2026-44992 · Debian+4 · Golang-Golang-X-Image+3

Uuganbayar Lkhamsuren · Published 2026-05-29 · Updated 2026-07-08 · CVE-2026-46599

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The TIFF decoder fails to impose a limit on the size of PackBits-compressed data. This allows a maliciously crafted image, even one with small pixel dimensions and encoded size, to force the decoder to process excessive amounts of compressed data, leading to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CLEANSTART-2026-BP02821

CVE-2026-46599

GHSA-Q675-QJ96-32M9

GO-2026-5032

Affected Products

Golang-Golang-X-Image

Golang.Org/X/Image

Golang.Org/X/Image/Tiff

Rclone

References · 99

• https://nvd.nist.gov/vuln/detail/CVE-2026-39820 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42500 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42499 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-39819 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-39834 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42508 · Security Note
• https://osv.dev/vulnerability/GO-2026-5032 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33811 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-27145 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-39830 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-29181 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-46599 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-39823 · Security Note
• https://ubuntu.com/security/CVE-2026-46599 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-39833 · Security Note