GHSA-rm3j-f69w-wqmq

Source

https://github.com/advisories/GHSA-rm3j-f69w-wqmq

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-rm3j-f69w-wqmq/GHSA-rm3j-f69w-wqmq.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-rm3j-f69w-wqmq

Aliases

Downstream

CGA (4496)

MINI (243)

Published

2026-06-25T22:21:40Z

Modified

2026-09-10T03:50:50Z

Severity

9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVSS Calculator

Summary

golang.org/x/crypto vulnerable to infinite loop on large channel writes

Details

When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation.

Database specific

{
    "cwe_ids":  [
        "CWE-190"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-06-25T22:21:40Z",
    "nvd_published_at":  "2026-05-22T04:16:24Z",
    "severity":  "CRITICAL"
}

References

Affected packages

Go / golang.org/x/crypto

Package

Name: golang.org/x/crypto; View open source insights on deps.dev
Purl: pkg:golang/golang.org/x/crypto

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.52.0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-rm3j-f69w-wqmq/GHSA-rm3j-f69w-wqmq.json"