How many golang tiff CVEs are in CISA KEV?

None of golang tiff's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for golang tiff vulnerabilities?

No golang tiff CVEs currently have a tracked public exploit in this dataset.

Which versions of golang tiff are affected?

4 distinct golang tiff versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What is the average severity of golang tiff CVEs?

The average CVSS base score across golang tiff's scored CVEs is 6.1.

golang tiff Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: golang tiff vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

golang tiff Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

golang tiff has 3 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting golang tiff, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of golang tiff's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of golang tiff's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No golang tiff CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every golang tiff version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.38.01 CVE
< 0.43.01 CVE

Fixed in

0.38.01 CVE
0.43.01 CVE

Find a version

3 CVEs

Sort

Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image
CVE-2026-46604
Patch
High · CVSS 7.5
EPSS 0.3% (27th pct)2026-06-26
OOM from malicious IFD offset in golang.org/x/image/tiff
CVE-2026-33809
Patch
Medium · CVSS 5.3
EPSS 0.3% (25th pct)2026-03-25
Denial of service via crafted TIFF image in golang.org/x/image/tiff
CVE-2022-41727
Patch
Medium · CVSS 5.5
EPSS 0.3% (23th pct)2023-02-28

Disclosure activity by year

How many golang tiff CVEs were published each year.

2023

2026

Other golang products

Browse vulnerabilities for other products by golang.

go178 CVEs crypto23 CVEs net14 CVEs http26 CVEs image6 CVEs text4 CVEs ssh3 CVEs networking2 CVEs

All golang vulnerabilities

Frequently asked questions

Common questions about golang tiff vulnerabilities.

How many CVEs does golang tiff have?: golang tiff has 3 published CVE records since 2023.
How many golang tiff CVEs are in CISA KEV?: None of golang tiff's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for golang tiff vulnerabilities?: No golang tiff CVEs currently have a tracked public exploit in this dataset.
Which versions of golang tiff are affected?: 4 distinct golang tiff versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What is the average severity of golang tiff CVEs?: The average CVSS base score across golang tiff's scored CVEs is 6.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track golang tiff vulnerabilities

Monitor new golang tiff vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing