Lucene search

K
nvd[email protected]NVD:CVE-2024-24787
HistoryMay 08, 2024 - 4:15 p.m.

CVE-2024-24787

2024-05-0816:15:08
web.nvd.nist.gov
1
darwin
go module
code execution
apple version of ld
cgo
ldflags
security vulnerability

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a “#cgo LDFLAGS” directive.

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%