Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-docsUpgrade go-toolsetUpgrade delveUpgrade golangUpgrade golang-testsUpgrade golang-binUpgrade golang-srcUpgrade golang-raceUpgrade golang-misc | Jul 23, 2026 | Apr 27, 2026 |
| Alpine Linux | — | Upgrade rcloneUpgrade go | Apr 13, 2026 | Apr 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade oci-add-hooksUpgrade golang-sharedUpgrade golist-debuginfoUpgrade runc-debuginfoUpgrade amazon-ecr-credential-helperUpgrade golistUpgrade golang-miscUpgrade docker-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golangUpgrade runfinch-finchUpgrade amazon-cloudwatch-agentUpgrade nerdctl-debuginfoUpgrade golang-testsUpgrade dockerUpgrade ecs-initUpgrade golang-srcUpgrade containerd-stressUpgrade golang-binUpgrade soci-snapshotterUpgrade containerd-debuginfoUpgrade nerdctlUpgrade containerdUpgrade golang-docsUpgrade runc | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade containerd-debugsourceUpgrade credentials-fetcherUpgrade containerdUpgrade golang-miscUpgrade oci-add-hooksUpgrade golist-debugsourceUpgrade runc-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade golist-debuginfoUpgrade amazon-cloudwatch-agentUpgrade golang-sharedUpgrade golistUpgrade docker-debugsourceUpgrade docker-debuginfoUpgrade ecs-initUpgrade containerd-debuginfoUpgrade golang-srcUpgrade amazon-ecr-credential-helperUpgrade containerd-stress-debuginfoUpgrade dockerUpgrade oci-add-hooks-debugsourceUpgrade golang-docsUpgrade nerdctlUpgrade runcUpgrade runfinch-finchUpgrade golang-binUpgrade containerd-stressUpgrade runc-debugsourceUpgrade golang-testsUpgrade soci-snapshotterUpgrade golang | May 4, 2026 | Apr 8, 2026 |
| Oracle_linux | — | Upgrade golang-docsUpgrade golang-binUpgrade golang-testsUpgrade golang-srcUpgrade delveUpgrade golang-miscUpgrade golang-raceUpgrade go-toolsetUpgrade golang | Apr 27, 2026 | Apr 8, 2026 |
| Redhat_linux | — | Upgrade golang-binUpgrade delve-debugsourceUpgrade golang-testsUpgrade golangNo solution existsUpgrade golang-srcUpgrade golang-miscUpgrade golang-raceUpgrade delve-debuginfoUpgrade delveUpgrade go-toolsetUpgrade golang-docs | May 8, 2026 | Apr 8, 2026 |
| Rocky_linux | — | Upgrade go-toolsetUpgrade golang-raceUpgrade golangUpgrade delveUpgrade delve-debuginfoUpgrade delve-debugsourceUpgrade golang-bin | May 11, 2026 | May 6, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 10.4.1Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 10.2.5Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.0.8Upgrade Splunk Enterprise to version 9.4.13 | Jul 30, 2026 | Apr 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub