Memory Exhaustion Vulnerability in Go Programming Language
CVE-2025-58185

5.3MEDIUM

Key Information:

Vendor: Go Standard Library
Status: Encoding/asn1
Vendor: CVE Published:; 29 October 2025

🔔 Create Go Standard Library Vulnerability Alert

What is CVE-2025-58185?

A vulnerability has been identified in the parsing of maliciously crafted DER payloads within the Go programming language. Exploiting this vulnerability could lead to excessive memory allocation, resulting in memory exhaustion and potentially impacting the performance and stability of applications built with Go.

Affected Version(s)

encoding/asn1 0 < 1.24.8

encoding/asn1 1.25.0 < 1.25.2

References

https://go.dev/issue/75671

https://go.dev/cl/709856

https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 29, 2025
Vulnerability Reserved
Aug 27, 2025

Credit

Jakub Ciolek

JSON