2460227 – (CVE-2026-33812) CVE-2026-33812 golang.org/x/image: golang: golang.org/x/image: Denial of Service due to excessive memory allocation when parsing malicious font files

Bug 2460227 (CVE-2026-33812) - CVE-2026-33812 golang.org/x/image: golang: golang.org/x/image: Denial of Service due to excessive memory allocation when parsing malicious font files

Summary: CVE-2026-33812 golang.org/x/image: golang: golang.org/x/image: Denial of Serv...

Keywords:
Status:	NEW
Alias:	CVE-2026-33812
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	medium
Severity:	medium
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2026-04-21 20:01 UTC by OSIDB Bzimport
Modified:	2026-05-02 02:18 UTC (History)
CC List:	49 users (show)
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Description OSIDB Bzimport 2026-04-21 20:01:53 UTC

Parsing a malicious font file can cause excessive memory allocation.

Note You need to log in before you can comment on or make changes to this bug.

aazores
alcohan
anjoseph
bbrownin
cmah
dhanak
drosa
dschmidt
dsimansk
eaguilar
ebaron
eglynn
erezende
fdeutsch
gparvin
jbalunas
jcantril
jjoyce
jkoehler
jlanda
jolong
jprabhak
jpretori
jschluet
kingland
kshier
kverlaen
lhh
lphiri
mburns
mgarciac
mnovotny
oramraz
pahickey
pjindal
rhaigner
rhel-process-autobot
rojacob
sausingh
simaishi
smcdonal
smullick
stcannon
stirabos
teagle
thason
watson-tool-maintainers
wtam
yguenane