New: Corgea AI Pentesting — autonomous penetration testing in hours, not weeks

Panic when parsing invalid palette-color images in golang.org/x/image

GHSA-9phm-fm57-rhg8 · CVE-2024-24792 · GO-2024-2937

Published Jun 26, 2024 · Modified Feb 4, 2026

Description

Parsing a corrupt or malicious image with invalid color indices can cause a panic.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2024-24792
PACKAGE https://cs.opensource.google/go/x/image
WEB https://go.dev/cl/588115
WEB https://go.dev/issue/67624
WEB https://pkg.go.dev/vuln/GO-2024-2937

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes