CVE-2022-41727 is a denial-of-service vulnerability affecting various Go language image processing libraries, including those used in Fedora projects. An attacker can craft a malicious TIFF image that, when processed by the DecodeConfig function, consumes excessive memory, leading to a system crash. Rated Medium severity (CVSS 5.5), this vulnerability requires user interaction (e.g., opening the crafted image) and has no known public exploits, Metasploit modules, or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 0.5.0CPE matchmatch criteria | cpe:2.3:a:golang:image:*:*:*:*:*:go:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:golang:tiff:-:*:*:*:*:go:*:* | ||
37CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* | ||
38CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.