CVE-2025-61732

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary...

GO-2026-4433 Potential code smuggling via doc comments in cmd/cgo

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary...

PT-2026-6533

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary...

CVE-2025-61732: Improper Control of Generation of Code

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary...

PT-2026-5930

Name of the Vulnerable Software and Affected Versions Go affected versions not specified Description A difference in how Go and C/C++ interpret comments can allow malicious code to be hidden within the compiled binary when using cgo. This technique, known as code smuggling, enables attackers to...