CVE-2025-61732

Опубликовано: 05 фев. 2026

Источник: nvd

CVSS3: 8.6

CVSS3: 7.4

EPSS Низкий

Описание

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*

Версия до 1.24.13 (исключая)

cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*

Версия от 1.25.0 (включая) до 1.25.7 (исключая)

EPSS

Процентиль: 40%

0.00491

Низкий

8.6 High

CVSS3

7.4 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVE-2025-61732

CVSS3: 8.6

ubuntu

8 месяцев назад

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

CVE-2025-61732

CVSS3: 7.4

redhat

8 месяцев назад

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

CVE-2025-61732

msrc

19 дней назад

Potential code smuggling via doc comments in cmd/cgo

CVE-2025-61732

CVSS3: 8.6

debian

8 месяцев назад

A discrepancy between how Go and C/C++ comments were parsed allowed fo ...

GHSA-8jvr-vh7g-f8gx

CVSS3: 8.6

github

8 месяцев назад

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

EPSS

Процентиль: 40%

0.00491

Низкий

8.6 High

CVSS3

7.4 High

CVSS3

Дефекты

CWE-94