CVE-2026-42500 — Panic when reading out of bound palette index in golang.org/x/image/bmp
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.
Published: 2026-05-29 · CVSS: 5.3 · CVSS 3.1
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7