7.5
High
CVE-2023-24537 Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can…
Description
Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| go/scanner 1.20 | 1.20.0-0 → < 1.20.3 | 1.20.3 |
| go/scanner 1.19 | earliest → < 1.19.8 | 1.19.8 |