9.8
Critical
CVE-2026-27143 Arithmetic over induction variables in loops were not correctly checked for underflow or overflow
Description
Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| cmd/compile 1.26 | 1.26.0-0 → < 1.26.2 | 1.26.2 |
| cmd/compile 1.25 | earliest → < 1.25.9 | 1.25.9 |
References
- go.dev go.dev
- go.dev go.dev
- groups.google.com groups.google.com
- pkg.go.dev pkg.go.dev
Timeline
- Published
- Last modified