CVE-2026-27144

Katalog CVE

CVSS 7.1 · High EPSS 0,26%

Kerentanan Access of Resource Using Incompatible Type ('Type Confusion') pada golang go. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory corruption at runtime.

Rincian

Terbit di NVD

8 April 2026

Terakhir diubah

25 Juli 2026

Status NVD

Analyzed

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://pkg.go.dev/vuln/GO-2026-4867 advisory vendor
• https://go.dev/cl/763764 patch
• https://go.dev/issue/78371 issue tracking
• https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU mailing list · release notes