Junglewise Threat Intelligence

GO-2020-0002 - The Data, Context, or Key finalizers might run during or before GPGME operations. This will release the C structures that are still in use

Severity: info · Published 2021-04-14

Technologies: github.com/proglottis/gpgme (Go). Vendors: Go.

Executive brief

The Data, Context, or Key finalizers might run during or before GPGME operations. This will release the C structures that are still in use, leading to crashes and potentially code execution through a use-after-free.

Affected products

  • Go github.com/proglottis/gpgme

Related threats