CVE-2026-42500
Not scored
Panic when reading out of bound palette index in golang.org/x/image/bmp
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.
Exploit probability
0.4%
Published
May 29, 2026
Required by
Not available
Last source change
June 16, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
GO-2026-5031
View original source
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.
05 / REFERENCES