7.1
High
CVE-2026-27144 The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented…
Description
The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory corruption at runtime.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| cmd/compile 1.26 | 1.26.0-0 → < 1.26.2 | 1.26.2 |
| cmd/compile 1.25 | earliest → < 1.25.9 | 1.25.9 |
References
- go.dev go.dev
- go.dev go.dev
- groups.google.com groups.google.com
- pkg.go.dev pkg.go.dev
Timeline
- Published
- Last modified