GO-2020-0031 - Due to improper setting of finalizers, memory passed to C may be freed before it is used, leading to crashes due to memory corruption or pos

Severity: info · Published 2021-04-14

Technologies: github.com/proglottis/gpgme (Go). Vendors: Go.

Executive brief

Due to improper setting of finalizers, memory passed to C may be freed before it is used, leading to crashes due to memory corruption or possible code execution.

Affected products

Go github.com/proglottis/gpgme

Related threats

GO-2020-0002 - The Data, Context, or Key finalizers might run during or before GPGME operations. This will release the C structures that are still in use
GO-2021-0096 - Memory corruption or code execution in github.com/proglottis/gpgme