Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

golang-golang-x-image

A vulnerability in the golang x image package's webp decoder can cause a panic when processing a VP8 chunk whose dimensions do not match the canvas size. This issue affects multiple specific versions of the golang-golang-x-image package. The vulnerability has a CVSS score of 7.5, indicating a medium severity impact primarily affecting availability due to potential denial of service via application crash.

The golang x image package's webp decoder contains a flaw where it panics if it encounters a VP8 chunk with dimensions that differ from the expected canvas size. This can lead to an application crash, impacting availability but not confidentiality or integrity. The vulnerability is identified as CVE-2026-46601 and affects specific versions of the golang-golang-x-image package, including versions 0.7.0-1, 0.13.0-1, 0.14.0-1, 0.15.0-1, 0.18.0-1, 0.32.0-1, 0.35.0-1, 0.39.0-1, 0.42.0-1, and 0.45.0-1. No known exploits in the wild have been reported, and no patch or remediation information is provided in the source data.

A vulnerability in the golang x image package's webp decoder can cause a panic when processing a VP8 chunk whose dimensions do not match the canvas size. This issue affects multiple specific versions of the golang-golang-x-image package. The vulnerability has a CVSS score of 7.5, indicating a medium

Golang golang x image: The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size. (CVE-2026-46601)

webp

The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.

CVE-2026-46601 is an out-of-bounds read vulnerability (CWE-125) in the golang.org/x/image/webp package. Specifically, the webp decoder panics when it encounters a VP8 chunk with dimensions that do not align with the expected canvas size. This can lead to a denial of service condition by crashing the application using the vulnerable decoder. The vulnerability affects all versions before 0.43.0. The CVSS 3.1 base score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability.

Detailed information about CVE-2026-46601: CWE-125: Out-of-bounds Read in golang.org/x/image golang.org/x/image/webp affecting golang.org/x/image golang.org/x/i

CVE-2026-46601: CWE-125: Out-of-bounds Read in golang.org/x/image golang.org/x/image/webp - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-46601: CWE-125: Out-of-bounds Read in golang.org/x/image golang.org/x/image/webp


Golang golang x image: The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size. (CVE-2026-46601)CVE-2026-46601 0 A vulnerability in the golang x image package's webp decoder can cause a panic when processing a VP8 chunk whose dimensions do not match the canvas size. This issue affects multiple specific versions of the golang-golang-x-image package. The vulnerability has a CVSS score of 7.5, indicating a medium severity impact primarily affecting availability due to potential denial of service via application crash. MediumVulnerability#gcve #osv #ubuntu-cve-2026-46601 Join the discussion	GCVE Database	06/25/2026, 20:17:00 UTC Added: 10/17/2026, 22:27:30 UTC
CVE-2026-46601: CWE-125: Out-of-bounds Read in golang.org/x/image golang.org/x/image/webpCVE-2026-46601 0 The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size. HighVulnerability#cve #cve-2026-46601 #cwe-125 Join the discussion	CVE Database V5	06/25/2026, 19:47:21 UTC Added: 06/25/2026, 20:01:08 UTC

Threats Tagged 'cve-2026-46601'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-46601'

Lead Pen Test Professional