GO-2026-6905
Reader.Next parses the 10-byte decimal size field of an archive member header with strconv.ParseInt without rejecting negative values. A header with a negative size leaves the reader with a negative remaining byte count, causing the subsequent call to Reader.Read to panic with a slice bounds out of range error when slicing the caller's buffer.
AI analysis
Not analysed yet.
Claude analyses new vulnerabilities after each morning's collection, most important first, up to a daily limit. The verified data on this page is complete without it.
| Product | Affected versions | Fixed in | Source |
|---|---|---|---|
| github.com/blakesmith/arGo | all versions | None listed | OSV |
No weakness classification (CWE) has been assigned yet.
Published
First publication at the source
Last modified
Latest change at the source
Collected
First seen by Baba Yaga Security