Golang Paletted BMP Decoding Panic Vulnerability

A vulnerability exists in the Golang package 'golang.org/x/image/bmp' prior to version 0.41.0, where decoding a paletted BMP file with an out-of-range palette index causes a panic when accessing pixels in the invalid image. This issue has been addressed in version 0.41.0, which now correctly returns an error instead of causing a panic.

Impact

The vulnerability leads to a panic, causing a runtime error that interrupts the program's execution.

Remediation

Users can update to Golang 'golang.org/x/image' version 0.41.0 or later to address this vulnerability.