← CVE Intelligence

CVE-2026-27144

Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile PUBLISHED

Description (CNA)

The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory corruption at runtime.

Affected (CNA)

Vendor / productVersions
Go toolchain / cmd/compileaffected 0 before 1.25.9; affected 1.26.0-0 before 1.26.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.