Out-of-Bounds Vulnerability in TIFF Decoder Affects Go Programming Language

CVE-2026-46604

What is CVE-2026-46604?

A vulnerability exists in the TIFF decoder of the Go programming language, which may lead to application crashes when processing invalid images. Specifically, an out-of-bounds strip offset could cause the decoder to panic, resulting in a denial of service. Developers and users handling TIFF images need to be aware of this flaw to ensure their applications remain stable and secure.

References