Related Vulnerabilities: CVE-2022-24675  

encoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large amount of PEM data.

Description

The MITRE CVE dictionary describes this issue as:

encoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large amount of PEM data.

Additional Information

  • Bugzilla 2077688: CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode
  • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
  • FAQ: Frequently asked questions about CVE-2022-24675