Go PackBits Decompression Resource Consumption Vulnerability

A vulnerability in the TIFF decoder of the Go programming language's image processing package allows for excessive resource consumption during the decompression of PackBits-compressed data. The issue arises because the decoder does not impose a limit on the size of the compressed data, enabling a small, maliciously-crafted image to cause the decoder to process large amounts of data. This vulnerability affects versions of the 'golang.org/x/image' package prior to v0.41.0.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, where the decoder consumes excessive resources, potentially causing performance degradation or application failure.

Remediation

Users can update to version v0.41.0 of the 'golang.org/x/image' package to address this vulnerability.