CVE-2024-24787
May 8, 2024, 5:05 p.m.
None
No Score
Description
On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive.
Product(s) Impacted
| Product | Versions |
|---|---|
| Go programming language |
|
Weaknesses
Tags
Date
- Published: May 8, 2024, 4:15 p.m.
- Last Modified: May 8, 2024, 5:05 p.m.
Status : Awaiting Analysis
CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.
More infoSource
security@golang.org
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.