Interface Casting Flaw in Certificate Chain Validation for Go Programming Language

CVE-2025-58188

What is CVE-2025-58188?

A flaw in the Go programming language can cause programs to panic when validating certificate chains that include DSA public keys. The issue stems from an interface casting assumption that these keys properly implement the Equal method. If such assumptions are not met, it can lead to unexpected behaviors during the validation of arbitrary certificate chains, potentially impacting application stability.

References