CVE-2026-33812

Description

Parsing a malicious font file can cause excessive memory allocation.

PUBLISHED Reserved 2026-03-23 | Published 2026-04-21 | Updated 2026-04-21 | Assigner Go

Problem types

CWE-789: Memory Allocation with Excessive Size Value

Product status

Credits

Andy Gill, ZephrSec Ltd

References

go.dev/cl/761180

go.dev/issue/78382

pkg.go.dev/vuln/GO-2026-4962

cve.org (CVE-2026-33812)

nvd.nist.gov (CVE-2026-33812)

Download JSON