CVE-2026-27144: Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile
The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory corruption at runtime.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27144?
CVE-2026-27144 has a severity rating that indicates it can lead to memory corruption issues.
How do I fix CVE-2026-27144?
To fix CVE-2026-27144, upgrade the Google Go compiler to a version newer than 1.25.9 or between 1.26.0 and 1.26.2.
What software is affected by CVE-2026-27144?
CVE-2026-27144 affects versions of the Google Go compiler prior to 1.25.9 and between 1.26.0 and 1.26.2.
What kind of issue does CVE-2026-27144 represent?
CVE-2026-27144 represents a miscompilation issue that can lead to memory corruption.
How does CVE-2026-27144 affect system security?
CVE-2026-27144 can potentially allow attackers to exploit memory corruption, impacting the integrity of applications built with the affected Go compiler.