Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-24790

Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

Description

The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Go standard library net/netip

Default version status: unaffected

  • 0 to < 1.21.11affected
  • 1.22.0-0 to < 1.22.4affected

References