7.1Yüksek

CVE-2026-27144Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile

Go toolchain cmd/compile Yayım: 2026-04-08 04:06 (7 ay önce)

Açıklama

The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory corruption at runtime.

Zayıflık türü (CWE): CWE-440 CWE-843

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
Go toolchain	cmd/compile	< 1.25.9, 1.26.0-0 – < 1.26.2
golang	go	< 1.25.9

Kaynaklar ve yamalar

https://go.dev/cl/763764 Patch
https://go.dev/issue/78371 Issue Tracking
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU Mailing ListRelease Notes
https://pkg.go.dev/vuln/GO-2026-4867 Vendor Advisory

CPE eşleşmeleri (NVD) (2)

cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* < 1.25.9
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* ≥ 1.26.0 < 1.26.2

CVSS puanı

7.1Yüksek

Kaynak: CISA-ADP · CVSS 3.1

Saldırı yolu: Yerel
Karmaşıklık: Düşük
Gereken yetki: Düşük
Kullanıcı etkileşimi: Gerekmez
Kapsam: Değişmez
Gizlilik: Yok
Bütünlük: Yüksek
Erişilebilirlik: Yüksek

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Tüm puanlar (3)

CISA-ADP	CVSS 3.1	7.1Yüksek
nvd	CVSS 3.1	7.1Yüksek
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	7.1Yüksek

EPSS (30 günde istismar olasılığı)

0.27%

tüm CVE'lerin %19'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: none
Otomatikleştirilebilir: no
Teknik etki: partial

Zaman çizelgesi

Numara ayrıldı2026-02-17
Yayımlandı2026-04-08 04:06
IP-DB'ye ulaştı2026-10-24 23:45
Son güncelleme2026-07-25 13:10

Numarayı veren (CNA): Go
NVD durumu: Analyzed

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Go

Puansız

CVE-2026-97033 12 saat önce

Unexpected code execution via --sysroot, -target, -isysroot, -Wl,-syslibroot, and -x cgo flags in cmd/go

Go toolchain cmd/go

Building a malicious package that uses cgo could cause arbitrary code execution at build time through several compiler and linker flags permitted in "#cgo" directives. Specifically, "--sysroot" in GCC and Clang relocates compiler subprograms, spec files, and …

Puansız

CVE-2026-97034 12 saat önce

Arbitrary command execution via GCC spec files in cgo linker search directories in cmd/go

Go toolchain cmd/go

When using GCC, building a malicious package that uses cgo could cause arbitrary command execution at link time via untrusted GCC spec files ("specs" or "*.spec"). When linking with "-fopenmp", "-fopenacc", or "-fsanitize=" in "#cgo LDFLAGS", GCC's built-in l…

Puansız

CVE-2026-97054 12 saat önce

HTTP/1 server crash due to MaxBytesReader header race in net/http

Go standard library net/http

For HTTP/1 servers, when MaxBytesReader's limit is exceeded, "Connection: close" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. As a result, an HTTP/1 server that utilizes …

Puansız

CVE-2026-97035 12 saat önce

Unexpected code execution and arbitrary file write via Clang -gen-* and GCC -gnat* flags in cgo in cmd/go

Go toolchain cmd/go

When using Clang or GCC, building a malicious package that uses cgo could cause unexpected code execution at build time or write files to arbitrary directories via "-gen-*" or "-gnat*" flags in "#cgo" directives. The "-g*" wildcard in the compiler and linker …

Puansız

CVE-2026-97036 12 saat önce

Arbitrary code execution during build on darwin via "-l to_library" in cgo in cmd/go

Go toolchain cmd/go

On Darwin, building a malicious package that uses cgo could cause arbitrary code execution when using the Apple linker due to passing "-l to_library <path>" in a "#cgo LDFLAGS" directive. The Apple linker recombines the separated arguments "-l" and "to_librar…

Puansız

CVE-2026-97037 12 saat önce

Linker script injection via split -Wl, flags and Darwin or symbol linker flags in cgo in cmd/go

Go toolchain cmd/go

Building a malicious package that uses cgo could cause arbitrary code execution at link time by passing linker script files to the host linker via "#cgo LDFLAGS". Split "-Wl," flags that consume a following argument (such as "-Wl,-rpath", "-Wl,--just-symbols"…