UNKNOWN Go
Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image
GO-2026-5061 · CVE-2026-46601
Published · Modified
Description
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.
References
Ready to move
Start Securing
Free, no credit card | First findings in minutes