CVE-2026-33813
High
Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.
Exploit probability
0.3%
Published
April 21, 2026
Required by
Not available
Last source change
June 25, 2026
02 / AFFECTED SOFTWARE
Affected packages
38 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
CVE-2026-33813
View original source
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.
Open Source Vulnerabilities
GO-2026-4961
View original source
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.
05 / REFERENCES