A vulnerability was found in cmd-compile up to 1.25.8/1.26.1 on Go and classified as critical. Executing a manipulation of the argument induction can lead to integer overflow.
| Vendor | Product | Versions |
|---|---|---|
| go toolchain | cmd/compile | 0, 1.26.0-0, 1.25.8, 1.26.1 |
Updated severity to CRITICAL, added affected versions 1.25.8 and 1.26.1, and noted that no exploit is available.
Initial creation
