GO-2026-5061Published
Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image
Exact source revision recorded 24 Oct 2026 13:19:41 UTC. It does not establish the source's current position. Latest evidence.
osv · GO-2026-5061
PublishedThe webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.
- Source published
- 18 Jun 2026 22:46:58 UTC
- Source modified
- 26 Jun 2026 13:44:18 UTC
- Observed here
- 24 Oct 2026 13:19:41 UTC
- Source terms
- OSV · upstream source license applies
Original source record · Cite this exact observation · Complete original publisher JSON
This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: osv · OSV · upstream source license applies. Source text is retained; field grouping and change labels are provided by ChangeIntel.