Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-27140 2 Golang, Gotoolchain 2 Go, Cmd/go 2026-08-27 8.8 High
SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.
CVE-2026-27143 2 Golang, Gotoolchain 2 Go, Cmd/compile 2026-04-18 9.8 Critical
Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption.
CVE-2026-27144 2 Golang, Gotoolchain 2 Go, Cmd/compile 2026-04-17 7.1 High
The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory corruption at runtime.