AUGUST 14, 2026
Live Feed
Back to database
Case File

CVE-2026-46603

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-14 · Last synced 2026-08-14

CyberRota Analysis

AI-Generated

The VP8L decoding functionality in the Go programming language's image package is vulnerable to excessive memory allocation when handling specially crafted VP8L images with numerous unused Huffman tree groups. This flaw can be exploited by remote attackers to trigger memory exhaustion, leading to denial of service. Organizations utilizing this image processing library should prioritize patching or mitigating this vulnerability to prevent potential service disruptions.

CVE
CVE-2026-46603
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A

Original NVD Description

VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups. This allows a remote attacker to cause a denial of service via memory exhaustion.