CVE-2024-34155
Moderate
Stack exhaustion in all Parse functions in go/parser
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.
Exploit probability
0.8%
Published
September 6, 2024
Required by
Not available
Last source change
February 24, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
CVE-2024-34155
View original source
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.
Open Source Vulnerabilities
GO-2024-3105
View original source
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.
Open Source Vulnerabilities
BIT-golang-2024-34155
View original source
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.
05 / REFERENCES