CVE-2026-33812

Excessive memory allocation when decoding malicious SFNT in golang.org/x/image PUBLISHED

Description (CNA)

Parsing a malicious font file can cause excessive memory allocation.

Vendor / product	Versions
golang.org/x/image / golang.org/x/image/font/sfnt	affected 0 before 0.39.0

No CWE identifiers supplied.

CISA-ADP

No English description supplied.

No references supplied.