Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-29 | 1 | Disclosure1 |
| 2026-06-03 | 1 | Patch1 |
| 2026-07-08 | 1 | Disclosure1 |
CVE-2026-46599 in golang/x/image/tiff allows unauthenticated remote attackers to exhaust system resources via crafted TIFF images https://ift.tt/bdZEXrA
Post summary
The text announces CVE‑2026‑46599, describing how crafted TIFF images can cause resource exhaustion by unauthenticated attackers, but provides no PoC, exploit code, or mitigation details.
🚨 HIGH Severity: CVE-2026-46599 (CVSS 7.5) TIFF decoder vulnerability allows malicious images to trigger excessive decompression of PackBits data, leading to DoS. Network exploitable, no user interaction required. Patch immediately. #CVE #PatchNow https://t.co/vvopgZ0tNE
Post summary
The tweet announces a high‑severity DoS vulnerability (CVE‑2026‑46599) in a TIFF decoder that can be exploited over the network and advises users to apply the immediate patch.
CVE-2026-46599 Unbounded PackBits Decompression in TIFF Decoder Causing Denial of Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-46599
Post summary
The post announces CVE-2026-46599, highlighting an unbounded PackBits decompression flaw in a TIFF decoder that can lead to denial of service, but provides no patch, exploit, or PoC details.