GCVE-110-MAGEIA-2022-171

Advisory Published

Vulnetix · Advisory published May 12, 2022

encoding/pem: fix stack overflow in Decode. A large (more than 5 MB) PEM input can cause a stack overflow in Decode, leading the program to crash (CVE-2022-24675) crypto/elliptic: tolerate all oversized scalars in generic P-256. A crafted scalar input longer than 32 bytes can cause P256().ScalarMult or P256().ScalarBaseMult to panic. Indirect uses through crypto/ecdsa and crypto/tls are unaffected. amd64, arm64, ppc64le, and s390x are unaffected. (CVE-2022-28327)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Salesforce	flow	—	—
Mageia	golang	0 (affected), 1.17.9-1.mga8 (unaffected)	—

References

Updated golang packages fix security vulnerability

advisory

Updated golang packages fix security vulnerability

issue

Updated golang packages fix security vulnerability

issue

Browse GCVE Records

73,040 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON