CVE-2026-46597
EUVD-2026-3138822.05.2026, 04:16
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| golang | crypto | 𝑥 < 0.52.0 |
𝑥
= Vulnerable software versions
Debian Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| amazon-ssm-agent |
| ||||||||||||||||
| apptainer |
| ||||||||||||||||
| apptainer-sle15_6 |
| ||||||||||||||||
| buildah |
| ||||||||||||||||
| google-guest-agent |
| ||||||||||||||||
| google-osconfig-agent |
|
Amazon Linux Releases
Amazon Package | |||||
|---|---|---|---|---|---|
| containerd |
| ||||
| containerd-debuginfo |
| ||||
| containerd-debugsource |
| ||||
| containerd-stress |
| ||||
| containerd-stress-debuginfo |
| ||||
| nerdctl |
| ||||
| nerdctl-debuginfo |
| ||||
| rclone |
| ||||
| rclone-debuginfo |
| ||||
| rclone-debugsource |
| ||||
| runfinch-finch |
|
Azure Linux Releases
Azure Package | |||
|---|---|---|---|
| cert-manager |
| ||
| cf-cli |
| ||
| docker-buildx |
| ||
| docker-compose |
| ||
| gh |
| ||
| kubernetes |
| ||
| kubevirt |
| ||
| moby-engine |
| ||
| packer |
| ||
| telegraf |
|
Common Weakness Enumeration
Vulnerability Media Exposure