Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-24537

Infinite loop in parsing in go/scanner

Description

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Go standard library go/scanner

Default version status: unaffected

  • 0 to < 1.19.8affected
  • 1.20.0-0 to < 1.20.3affected

References