Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2275 articles · 131221 vulns · 38/41 feeds (7d)
← Back to list
7.5
CVE-2026-33813EXPLOITEDPATCHED
google · webp

Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image

Description

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.

Affected Products

VendorProductVersions
googlewebp0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
red hatenterprise linuxcert_advisory90%

References

  • https://go.dev/cl/759860
  • https://go.dev/issue/78407
  • https://pkg.go.dev/vuln/GO-2026-4961

Related News (2 articles)

Tier B
BSI Advisories3h ago
[NEU] [mittel] Red Hat Hardened Images RPMs: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB12d ago
CVE-2026-33813 | x-image up to 0.38.x on 32-bit WEBP Image Parser integer overflow
→ No new info (linked only)
CVSS 3.17.5 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
0.39.0
PublishedApr 21, 2026
Last enriched12d agov2
Trending Score67
Source articles2
Independent2
Info Completeness7/14
Missing: cvss, epss, cwe, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-2441EXPKEV
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Trending: 58
CRITICALCVE-2026-7343EXP
CVE-2026-7343: Use after free in Views in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromise
Trending: 45
HIGHCVE-2026-7344EXP
CVE-2026-7344: Use after free in Accessibility in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had co
Trending: 43
HIGHCVE-2026-7363EXP
CVE-2026-7363: Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execut
Trending: 43
HIGHCVE-2026-7355EXP
CVE-2026-7355: Use after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code ins
Trending: 41

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 21, 2026
Discovered by ZDM
Apr 21, 2026
Updated: description, severity, affectedVersions, activelyExploited
Apr 21, 2026
Actively Exploited
Apr 22, 2026
Patch Available
Apr 22, 2026

Version History

v2
Last enriched 12d ago
v2Tier C12d ago

Updated description with details on integer overflow, changed severity to HIGH, and added affected versions up to 0.38.x.

descriptionseverityaffectedVersionsactivelyExploited
via VulDB
v112d ago

Initial creation