Memory Exhaustion Vulnerability in Go Programming Language
CVE-2025-58185

Currently unrated

Key Information:

Vendor: Go Standard Library
Status: Encoding/asn1
Vendor: CVE Published:; 29 October 2025

🔔 Create Go Standard Library Vulnerability Alert

What is CVE-2025-58185?

A vulnerability has been identified in the parsing of maliciously crafted DER payloads within the Go programming language. Exploiting this vulnerability could lead to excessive memory allocation, resulting in memory exhaustion and potentially impacting the performance and stability of applications built with Go.

Affected Version(s)

encoding/asn1 0 < 1.24.8

encoding/asn1 1.25.0 < 1.25.2

References

https://go.dev/issue/75671

https://go.dev/cl/709856

https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 29, 2025
Vulnerability Reserved
Aug 27, 2025

Credit

Jakub Ciolek

JSON