FlawAtlas
Search the atlas
CVE-2024-34156 High

Stack exhaustion in Decoder.Decode in encoding/gob

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Exploit probability 1.1%
Published September 6, 2024
Required by Not available
Last source change February 24, 2026

02 / AFFECTED SOFTWARE

Affected packages

Go stdlib
Bitnami golang

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2024-34156

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

View original source
Open Source Vulnerabilities GO-2024-3106

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

View original source
Open Source Vulnerabilities BIT-golang-2024-34156

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

View original source

05 / REFERENCES

Further evidence