{"id":"EUVD-2026-24247","revision":"1bab6f75191048a4aaa180630b125856","records":[{"revision":"1bab6f75191048a4aaa180630b125856","observedAt":"2026-10-30T05:00:27.668+00:00","statement":{"source":"euvd","id":"EUVD-2026-24247","aliases":["CVE-2026-33813"],"title":"Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.","description":"Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":null}],"references":["https://go.dev/cl/759860","https://go.dev/cl/780860","https://go.dev/issue/78407","https://pkg.go.dev/vuln/GO-2026-4961"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24247","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Apr 21, 2026, 7:21:27 PM","dateUpdated":"Jun 25, 2026, 7:47:15 PM"},"relatedAdvisories":[{"id":"RHSA-2026:56340","title":"Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.5.2","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27136","CVE-2026-32281","CVE-2026-32282","CVE-2026-33811","CVE-2026-33813","CVE-2026-39820","CVE-2026-39821","CVE-2026-42151","CVE-2026-42154","CVE-2026-42499","CVE-2026-42502","CVE-2026-42504","CVE-2026-56852"]},{"id":"RHSA-2026:34364","title":"Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.4.6","vulnerabilityIds":["CVE-2026-25681","CVE-2026-32285","CVE-2026-33186","CVE-2026-33811","CVE-2026-33813","CVE-2026-34986","CVE-2026-39820","CVE-2026-39821","CVE-2026-42154","CVE-2026-42499"]},{"id":"RHSA-2026:17789","title":"Red Hat Security Advisory: Red Hat build of Cryostat 4.2.0: new RHEL 9 container image security update","vulnerabilityIds":["CVE-2026-1002","CVE-2026-1525","CVE-2026-1526","CVE-2026-1528","CVE-2026-2229","CVE-2026-4800","CVE-2026-4926","CVE-2026-33186","CVE-2026-33813","CVE-2026-33815","CVE-2026-33816","CVE-2026-33870","CVE-2026-33871","CVE-2026-34986","CVE-2026-39852","CVE-2026-40895"]},{"id":"RHSA-2026:7385","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-22873","CVE-2025-47910","CVE-2025-47911","CVE-2025-47912","CVE-2025-47914","CVE-2025-58181","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-58190","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-61732","CVE-2025-68119","CVE-2025-68121","CVE-2026-25679","CVE-2026-27139","CVE-2026-27141","CVE-2026-27143","CVE-2026-27144","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33809","CVE-2026-33813","CVE-2026-42503"]},{"id":"RHSA-2026:21769","title":"Red Hat Security Advisory: Multicluster Global Hub 1.5.4 security update","vulnerabilityIds":["CVE-2026-4427","CVE-2026-21728","CVE-2026-25679","CVE-2026-27137","CVE-2026-27889","CVE-2026-29785","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32285","CVE-2026-32286","CVE-2026-33186","CVE-2026-33215","CVE-2026-33216","CVE-2026-33217","CVE-2026-33218","CVE-2026-33219","CVE-2026-33247","CVE-2026-33413","CVE-2026-33487","CVE-2026-33810","CVE-2026-33813","CVE-2026-33997","CVE-2026-34040","CVE-2026-34986","CVE-2026-40890","CVE-2026-41602","CVE-2026-41603","CVE-2026-41604","CVE-2026-41605","CVE-2026-41606","CVE-2026-41607","CVE-2026-41636","CVE-2026-43869"]},{"id":"openSUSE-SU-2026:10682-1","title":"rclone-1.74.0-1.1 on GA media","vulnerabilityIds":["CVE-2026-32952","CVE-2026-33813"]},{"id":"RHSA-2026:8291","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2026-25679","CVE-2026-33813","CVE-2026-42503"]},{"id":"WID-SEC-W-2026-1328","title":"Red Hat Hardened Images RPMs: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2026-2625","CVE-2026-2950","CVE-2026-33813","CVE-2026-42371"]},{"id":"RHSA-2026:23345","title":"Red Hat Security Advisory: Multicluster Global Hub 1.6.2 security update","vulnerabilityIds":["CVE-2026-4427","CVE-2026-21728","CVE-2026-25679","CVE-2026-27137","CVE-2026-27889","CVE-2026-29785","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32285","CVE-2026-32286","CVE-2026-33186","CVE-2026-33215","CVE-2026-33216","CVE-2026-33217","CVE-2026-33218","CVE-2026-33219","CVE-2026-33247","CVE-2026-33413","CVE-2026-33487","CVE-2026-33810","CVE-2026-33813","CVE-2026-33997","CVE-2026-34040","CVE-2026-34986","CVE-2026-40890","CVE-2026-41602","CVE-2026-41603","CVE-2026-41604","CVE-2026-41605","CVE-2026-41606","CVE-2026-41607","CVE-2026-41636","CVE-2026-43869"]},{"id":"openSUSE-SU-2026:21436-1","title":"Security update for rclone","vulnerabilityIds":["CVE-2025-68121","CVE-2026-25680","CVE-2026-25681","CVE-2026-27136","CVE-2026-27141","CVE-2026-27145","CVE-2026-32952","CVE-2026-33809","CVE-2026-33813","CVE-2026-33814","CVE-2026-39821","CVE-2026-39824","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-41176","CVE-2026-41179","CVE-2026-42500","CVE-2026-42502","CVE-2026-42504","CVE-2026-42506","CVE-2026-42507","CVE-2026-42508","CVE-2026-44740","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598","CVE-2026-49980","CVE-2026-54572","CVE-2026-59732","CVE-2026-59733"]},{"id":"RHSA-2026:22347","title":"Red Hat Security Advisory: Multicluster Global Hub 1.4.5 security update","vulnerabilityIds":["CVE-2026-4427","CVE-2026-21728","CVE-2026-25679","CVE-2026-27137","CVE-2026-27889","CVE-2026-29785","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32285","CVE-2026-32286","CVE-2026-33186","CVE-2026-33215","CVE-2026-33216","CVE-2026-33217","CVE-2026-33218","CVE-2026-33219","CVE-2026-33247","CVE-2026-33413","CVE-2026-33487","CVE-2026-33810","CVE-2026-33813","CVE-2026-33997","CVE-2026-34040","CVE-2026-34986","CVE-2026-40890","CVE-2026-41602","CVE-2026-41603","CVE-2026-41604","CVE-2026-41605","CVE-2026-41606","CVE-2026-41607","CVE-2026-41636","CVE-2026-43869"]},{"id":"RHSA-2026:24503","title":"Red Hat Security Advisory: Multicluster Global Hub 1.7.1 security update","vulnerabilityIds":["CVE-2025-41118","CVE-2026-21728","CVE-2026-32281","CVE-2026-32282","CVE-2026-33813","CVE-2026-33815","CVE-2026-33816","CVE-2026-34040","CVE-2026-40293","CVE-2026-40890","CVE-2026-41602","CVE-2026-43869"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-24247","identifiers":["EUVD-2026-24247","CVE-2026-33813"]},"retained":false,"historicalAffected":[]}],"coverage":[]}