VDB
KO

GO-2026-5061

Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image

Details

The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / golang.org/x/image
Introduced in: 0 Fixed in: 0.43.0
Fix go get golang.org/x/image@v0.43.0

References