← Database

CVE-2022-27536

HIGH CVSS: 7.5 Published: 2022-04-20 Modified: 2026-06-17

Description

Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.

Affected Platforms

Golang GoApple Macos

Weakness Type

CWE-295

References