Go Toolchain Cmd Compile vulnerabilities
2 known vulnerabilities affecting go_toolchain/cmd_compile.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1
Vulnerabilities
Page 1 of 1
CVE-2026-27143P3CRITICALCVSS 9.8fixed in 1.25.9≥ 1.26.0-0, < 1.26.22026-04-08
CVE-2026-27143 [CRITICAL] CVE-2026-27143: Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. A
Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption.
nvd
CVE-2026-27144P4HIGHCVSS 7.1fixed in 1.25.9≥ 1.26.0-0, < 1.26.22026-04-08
CVE-2026-27144 [HIGH] CWE-843 CVE-2026-27144: The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface
The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory corruption at runtime.
nvd