Skip to content

CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-2584

Panic when decoding invalid blocks in github.com/ipld/go-codec-dagpb

Read JSON ↗CVE.org ↗

Status: Published
Published: 2022-12-27
Updated: 2025-04-11
Assigning organization: Go

Description

The dag-pb codec can panic when decoding invalid blocks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

github.com/ipld/go-codec-dagpb github.com/ipld/go-codec-dagpb

Default version status: unaffected

0 to < 1.3.1affected

References