Junglewise Threat Intelligence

CVE-2020-8945: GO-2021-0096 - Memory corruption or code execution in github.com/proglottis/gpgme

CVE-2020-8945 · Severity: low · CVSS 3.1 · Published 2021-04-14

Technologies: github.com/proglottis/gpgme (Go). Vendors: Go.

Executive brief

Memory corruption or code execution in github.com/proglottis/gpgme

Affected products

Go github.com/proglottis/gpgme

Related threats

GO-2020-0031 - Due to improper setting of finalizers, memory passed to C may be freed before it is used, leading to crashes due to memory corruption or pos
GO-2020-0002 - The Data, Context, or Key finalizers might run during or before GPGME operations. This will release the C structures that are still in use