CVE-2026-33818
Enforce maximum recursion depth in encoding/asn1
Published Aug 13, 2026 · updated Oct 15, 2026 · Go standard library encoding/asn1
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.
Timeline
Detection, updates, and resolution for this record.
Aug 13, 2026 · Catalog
Detected
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.
Oct 10, 2026 · Catalog
Fix available
Go stdlib 0 → 1.25.13
Oct 10, 2026 · Catalog
Updated
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.
Oct 15, 2026 · CIRCL Vulnerability Lookup
Updated
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.
Affected
- Go stdlib0 → 1.25.13
- vendor Go standard library encoding/asn1version unspecified
Sources
- CIRCL Vulnerability LookupCVE-2026-33818
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.
vulnerability.circl.lu - CVE.orgCVE-2026-33818
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-33818
30-day exploitation probability 0.6%
first.org - OSV.devGO-2026-5972
Enforce maximum recursion depth in encoding/asn1
osv.dev