Go: Flaw in image/bmp library exposes data leaks

A vulnerability in golang.org/x/image/bmp enables out-of-bounds memory read via Palette Index.

Published 13sem3 sources✓ ConfirmedNotableupdated 12sem

≈ 18sSpeed

The fact

An attacker can exploit this flaw to obtain sensitive information or cause a denial of service.

The flaw affects applications using this library for BMP image processing.

3 sources — click a link to read an article on the topic:

Explore this topic

Auto-synthesis from 3 media sources · identified on August 12, 2026