FlawAtlas
Search the atlas
CVE-2026-27144 High

Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile

The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory corruption at runtime.

Exploit probability 0.3%
Published April 18, 2026
Required by Not available
Last source change April 18, 2026

02 / AFFECTED SOFTWARE

Affected packages

Unknown Unknown

150 explicit affected versions

Go toolchain
Bitnami golang

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2026-27144

The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory corruption at runtime.

View original source
Open Source Vulnerabilities GO-2026-4867

The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory corruption at runtime.

View original source
Open Source Vulnerabilities BIT-golang-2026-27144

The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory corruption at runtime.

View original source

05 / REFERENCES

Further evidence