Uncontrolled Memory Consumption Vulnerability in Go Programming Language
CVE-2022-23772

7.5HIGH

Key Information:

Vendor: Golang
Status: Go
Vendor: CVE Published:; 11 February 2022

What is CVE-2022-23772?

The Go programming language contains an overflow vulnerability within the Rat.SetString function in the math/big package, which can lead to uncontrolled memory consumption. This issue arises before the versions 1.16.14 and 1.17.7. An attacker could exploit this vulnerability, potentially affecting application performance and resource management by consuming excessive memory.