Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

CVE-2024-24790

What is CVE-2024-24790?

The vulnerability arises from the failure of specific methods such as IsPrivate and IsLoopback to handle IPv4-mapped IPv6 addresses accurately. Instead of recognizing these addresses correctly, the methods return unexpected false values. As a result, this inconsistency can lead to misinterpretation of network traffic and expose applications to incorrect access controls or routing behaviors. This issue poses a significant risk, especially in environments relying on accurate address verification.

References