How many golang tiff CVEs are in CISA KEV?

None of golang tiff's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for golang tiff vulnerabilities?

No golang tiff CVEs currently have a tracked public exploit in this dataset.

Which versions of golang tiff are affected?

4 distinct golang tiff versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in golang tiff CVEs?

golang tiff's CVEs most often map to these CWE weakness types: CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-787 (Out-of-bounds Write).

What is the average severity of golang tiff CVEs?

The average CVSS base score across golang tiff's scored CVEs is 6.1.

golang tiff Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: golang tiff vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

golang tiff Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

golang tiff has 3 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.1.

Severity and exploitation

How the CVSS severity of golang tiff's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of golang tiff's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No golang tiff CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every golang tiff version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.38.01 CVE
< 0.43.01 CVE

Fixed in

0.38.01 CVE
0.43.01 CVE

Find a version

3 CVEs

Sort

Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image
CVE-2026-46604
Patch
CWE-787
High · CVSS 7.5
EPSS 0.6% (48th pct)2026-06-26
OOM from malicious IFD offset in golang.org/x/image/tiff
CVE-2026-33809
Patch
CWE-434
Medium · CVSS 5.3
EPSS 0.4% (31th pct)2026-03-25
Denial of service via crafted TIFF image in golang.org/x/image/tiff
CVE-2022-41727
Patch
CWE-770
Medium · CVSS 5.5
EPSS 0.3% (22th pct)2023-02-28

Common weakness types

The CWE weakness categories most often found in golang tiff CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many golang tiff CVEs were published each year.

2023

2026

Other golang products

Browse vulnerabilities for other products by golang.

go177 CVEs crypto25 CVEs net14 CVEs http26 CVEs image6 CVEs text4 CVEs ssh3 CVEs networking2 CVEs

All golang vulnerabilities

Frequently asked questions

Common questions about golang tiff vulnerabilities.

How many CVEs does golang tiff have?: golang tiff has 3 published CVE records since 2023.
How many golang tiff CVEs are in CISA KEV?: None of golang tiff's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for golang tiff vulnerabilities?: No golang tiff CVEs currently have a tracked public exploit in this dataset.
Which versions of golang tiff are affected?: 4 distinct golang tiff versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in golang tiff CVEs?: golang tiff's CVEs most often map to these CWE weakness types: CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-787 (Out-of-bounds Write).
What is the average severity of golang tiff CVEs?: The average CVSS base score across golang tiff's scored CVEs is 6.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track golang tiff vulnerabilities

Get an alert for each new golang tiff CVE, with AI-written analysis and remediation steps.

Create an account See pricing