CVE-2022-32189

A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service...

CVE-2022-32189

CVE-2022-32189 affects Go's math/big: decoding big.Float and big.Rat can panic if the encoded message is too short, potentially causing a denial of service. The Initial Description cites vulnerable versions as Go before 1.17.13 and 1.18.5. Connected advisories (ALMA/ALAS) indicate fixes are distr...