9.8
Critique
CVE-2026-27143 Arithmetic over induction variables in loops were not correctly checked for underflow or overflow
Description
Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| cmd/compile 1.26 | 1.26.0-0 → < 1.26.2 | 1.26.2 |
| cmd/compile 1.25 | premières → < 1.25.9 | 1.25.9 |
Références
- go.dev go.dev
- go.dev go.dev
- groups.google.com groups.google.com
- pkg.go.dev pkg.go.dev
Chronologie
- Publiée
- Dernière modification