Skip to content
Sign in
9.8 Critical

CVE-2026-27143 Arithmetic over induction variables in loops were not correctly checked for underflow or overflow

Description

Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption.

Affected products and versions

Product Affected versions Fixed in
cmd/compile 1.26 1.26.0-0 → < 1.26.2 1.26.2
cmd/compile 1.25 earliest → < 1.25.9 1.25.9

Other CVEs of cmd/compile

The 2 CVEs of cmd/compile →
CVE-2026-27144 The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented… 7.1 High
Track this CVE