{"id":"EUVD-2026-24245","enisaUuid":"dd584feb-10a1-3166-a3a5-14c6103c55ed","description":"Parsing a malicious font file can cause excessive memory allocation.","datePublished":"Apr 21, 2026, 7:21:28 PM","dateUpdated":"Apr 21, 2026, 8:43:11 PM","baseScore":6.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","references":"https://go.dev/cl/761180\nhttps://go.dev/issue/78382\nhttps://pkg.go.dev/vuln/GO-2026-4962\n","aliases":"CVE-2026-33812\n","assigner":"Go","epss":0.11,"enisaIdProduct":[{"id":"e139efa1-4686-3a86-9e3b-b776069d0fce","product":{"name":"golang.org/x/image/font/sfnt","vendor":{"name":"golang.org/x/image"}},"product_version":"0 \u003c0.39.0"}],"enisaIdVendor":[{"id":"b0a09166-e102-3ae4-a4f8-859b8721d47d","vendor":{"name":"golang.org/x/image"}}],"enisaIdVulnerability":[{"id":"59281040-af6f-320c-ade5-26dfdad416ee","vulnerability":{"id":"CVE-2026-33812","description":"Parsing a malicious font file can cause excessive memory allocation.","datePublished":"Apr 21, 2026, 7:21:28 PM","dateUpdated":"Apr 21, 2026, 8:43:11 PM","status":"PUBLISHED","baseScore":6.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","references":"https://go.dev/cl/761180\nhttps://go.dev/issue/78382\nhttps://pkg.go.dev/vuln/GO-2026-4962\n","enisa_id":"EUVD-2026-24245\n","assigner":"Go","epss":0.11,"dataProcessed":"Nov 1, 2026, 4:06:25 AM","vulnerabilityProduct":[{"id":"21df9f07-7d9f-3f0d-8a00-4663ee5d0b08","product":{"name":"golang.org/x/image/font/sfnt","vendor":{"name":"golang.org/x/image"}},"product_version":"0 \u003c0.39.0"}],"vulnerabilityVendor":[{"id":"4dd8e379-9f9e-3d39-bfb3-d8ae7b4ca6a2","vendor":{"name":"golang.org/x/image"}}]}}],"enisaIdAdvisory":[{"id":"8d039af9-6c94-3081-9091-1113e1323e1d","advisory":{"id":"RHSA-2026:66266","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 9, 2026, 11:14:36 PM","dateUpdated":"Oct 31, 2026, 9:02:25 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:66266\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_66266.json\n","aliases":"CVE-2026-10582\nCVE-2026-10618\nCVE-2026-33812\nCVE-2026-44301\nCVE-2026-100690\nCVE-2026-100691\nCVE-2026-100692\nCVE-2026-100693\nCVE-2026-100694\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"42c1eddb-66e0-3d95-8f71-deaee1da88ca","product":{"name":"hugo-0:0.166.0-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"4af09ad1-ff40-359f-94f0-981310e9299d","product":{"name":"hugo-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"a5ccc638-49cd-3d59-8329-696c73cdc5ca","product":{"name":"hugo-0:0.166.0-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"b14693ba-51e4-315d-8cfd-0f002de61ee2","product":{"name":"hugo-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"b6c8df3a-c74b-3954-8c25-82ec22d0098f","product":{"name":"hugo-0:0.166.0-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"b76b8e89-c063-3589-b185-891a1fb79b07","product":{"name":"hugo-main@src","vendor":{"name":"Red Hat"}}},{"id":"f8c2902d-c58b-3044-9494-3aec74292b0d","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}}]}}]}