CVE-2026-33812 — Excessive memory allocation when decoding malicious SFNT in golang.org/x/image

Parsing a malicious font file can cause excessive memory allocation.

Published: 2026-04-21 · CVSS: 6.1 · CVSS 3.1

Parsing a malicious font file can cause excessive memory allocation.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7