The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory corruption at runtime.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade go-toolsetUpgrade delveUpgrade golang-binUpgrade golang-raceUpgrade golang-miscUpgrade golang-srcUpgrade golangUpgrade golang-docsUpgrade golang-tests | Jul 23, 2026 | Apr 27, 2026 |
| Alpine Linux | — | Upgrade goUpgrade rclone | Apr 13, 2026 | Apr 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade runc-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade oci-add-hooksUpgrade ecs-initUpgrade golang-miscUpgrade nerdctlUpgrade golang-binUpgrade golang-testsUpgrade nerdctl-debuginfoUpgrade dockerUpgrade golang-srcUpgrade golangUpgrade amazon-ecr-credential-helperUpgrade runcUpgrade golang-docsUpgrade golistUpgrade amazon-cloudwatch-agentUpgrade containerd-stressUpgrade docker-debuginfoUpgrade soci-snapshotterUpgrade containerdUpgrade runfinch-finchUpgrade golist-debuginfoUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade amazon-ecr-credential-helper-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade containerd-stress-debuginfoUpgrade golang-miscUpgrade oci-add-hooksUpgrade golang-binUpgrade golistUpgrade nerdctlUpgrade golang-srcUpgrade runfinch-finchUpgrade golang-testsUpgrade dockerUpgrade docker-debugsourceUpgrade golangUpgrade runc-debugsourceUpgrade golist-debuginfoUpgrade runc-debuginfoUpgrade oci-add-hooks-debugsourceUpgrade golist-debugsourceUpgrade golang-docsUpgrade docker-debuginfoUpgrade containerdUpgrade soci-snapshotterUpgrade runcUpgrade oci-add-hooks-debuginfoUpgrade credentials-fetcherUpgrade amazon-ecr-credential-helperUpgrade containerd-debugsourceUpgrade golang-sharedUpgrade ecs-initUpgrade containerd-debuginfoUpgrade containerd-stressUpgrade amazon-cloudwatch-agent | May 4, 2026 | Apr 8, 2026 |
| Oracle_linux | — | Upgrade golangUpgrade golang-srcUpgrade golang-raceUpgrade golang-testsUpgrade golang-miscUpgrade golang-docsUpgrade delveUpgrade golang-binUpgrade go-toolset | Apr 27, 2026 | Apr 8, 2026 |
| Redhat_linux | — | Upgrade golang-testsUpgrade delve-debugsourceUpgrade golang-srcUpgrade golang-raceUpgrade golangNo solution existsUpgrade golang-binUpgrade golang-miscUpgrade delve-debuginfoUpgrade delveUpgrade golang-docsUpgrade go-toolset | May 8, 2026 | Apr 8, 2026 |
| Rocky_linux | — | Upgrade delve-debugsourceUpgrade golangUpgrade golang-binUpgrade golang-raceUpgrade delveUpgrade delve-debuginfoUpgrade go-toolset | May 11, 2026 | May 6, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 10.0.8Upgrade Splunk Enterprise to version 10.4.1Upgrade Splunk Enterprise to version 10.2.5Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 9.4.13 | Jul 30, 2026 | Apr 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub