CNNVD-202602-874 Information

CNNVD ID

CNNVD-202602-874

CVE-2025-61732

  • CNNVD Published: 2026-02-05

Description (Chinese)

Google Go是美国谷歌(Google)公司的一种静态强类型、编译型、并发型,并具有垃圾回收功能的编程语言。 Google Go存在安全漏洞,该漏洞源于Go和C/C++注释解析方式存在差异,可能导致代码被走私到生成的cgo二进制文件中。

Description (English)

Google Go is a static type, compiler, hairdresser of Google and a programme language with a garbage recovery function. Google Go has a security loophole, which stems from differences in the interpretation of the Go and C/C++ notes, which could lead to the code being smuggled into the resulting cgo binary.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

谷歌

Published

2026-02-05

Last Modified

2026-02-24

References

https://go.dev/cl/734220 https://go.dev/issue/76697 https://groups.google.com/g/golang-announce/c/K09ubi9FQFk https://pkg.go.dev/vuln/GO-2026-4433

Patch

https://go.dev/dl/

Share on: