CVE-2026-46597 - Vulnerability Details - OpenCVE

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Golang	Ssh

No data.

No data.

References

Link	Providers
https://go.dev/cl/781620
https://go.dev/issue/79561
https://groups.google.com/g/golang-announce/c/a082jnz-LvI
https://pkg.go.dev/vuln/GO-2026-5013

History

Fri, 22 May 2026 18:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-190

Fri, 22 May 2026 16:30:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-680 CWE-704

Fri, 22 May 2026 14:30:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 22 May 2026 13:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Golang Golang ssh
Vendors & Products		Golang Golang ssh

Fri, 22 May 2026 04:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-680 CWE-704

Fri, 22 May 2026 03:30:00 +0000

Type	Values Removed	Values Added
Description		An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.
Title		Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh
References		https://go.dev/cl/781620 https://go.dev/issue/79561 https://groups.google.com/g/golang-announce/c/a082jnz-LvI https://pkg.go.dev/vuln/GO-2026-5013

MITRE

Status: PUBLISHED

Assigner: Go

Published: 2026-05-22T02:31:26.754Z

Updated: 2026-05-22T14:08:27.674Z

Reserved: 2026-05-15T17:35:00.813Z

Link: CVE-2026-46597

Vulnrichment

Updated: 2026-05-22T14:07:37.911Z

NVD

Status : Received

Published: 2026-05-22T04:16:26.003

Modified: 2026-05-22T04:16:26.003

Link: CVE-2026-46597

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-46597", "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "state": "PUBLISHED", "assignerShortName": "Go", "dateReserved": "2026-05-15T17:35:00.813Z", "datePublished": "2026-05-22T02:31:26.754Z", "dateUpdated": "2026-05-22T14:08:27.674Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", "dateUpdated": "2026-05-22T02:31:26.754Z"}, "title": "Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh", "descriptions": [{"lang": "en", "value": "An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs."}], "affected": [{"vendor": "golang.org/x/crypto", "product": "golang.org/x/crypto/ssh", "collectionURL": "https://pkg.go.dev", "packageName": "golang.org/x/crypto/ssh", "versions": [{"version": "0", "lessThan": "0.52.0", "status": "affected", "versionType": "semver"}], "programRoutines": [{"name": "gcmCipher.readCipherPacket"}, {"name": "Dial"}, {"name": "NewClientConn"}, {"name": "NewServerConn"}, {"name": "curve25519sha256.Client"}, {"name": "curve25519sha256.Server"}, {"name": "dhGEXSHA.Client"}, {"name": "dhGEXSHA.Server"}, {"name": "dhGroup.Client"}, {"name": "dhGroup.Server"}, {"name": "ecdh.Client"}, {"name": "ecdh.Server"}, {"name": "mlkem768WithCurve25519sha256.Client"}, {"name": "mlkem768WithCurve25519sha256.Server"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-191: Integer Underflow (Wrap or Wraparound)"}]}], "references": [{"url": "https://go.dev/issue/79561"}, {"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"}, {"url": "https://go.dev/cl/781620"}, {"url": "https://pkg.go.dev/vuln/GO-2026-5013"}], "credits": [{"lang": "en", "value": "Maciej Kawka"}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-05-22T14:08:24.589026Z", "id": "CVE-2026-46597", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-22T14:08:27.674Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-46597", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-22T14:08:24.589026Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-22T14:07:37.911Z"}}], "cna": {"title": "Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh", "credits": [{"lang": "en", "value": "Maciej Kawka"}], "affected": [{"vendor": "golang.org/x/crypto", "product": "golang.org/x/crypto/ssh", "versions": [{"status": "affected", "version": "0", "lessThan": "0.52.0", "versionType": "semver"}], "packageName": "golang.org/x/crypto/ssh", "collectionURL": "https://pkg.go.dev", "defaultStatus": "unaffected", "programRoutines": [{"name": "gcmCipher.readCipherPacket"}, {"name": "Dial"}, {"name": "NewClientConn"}, {"name": "NewServerConn"}, {"name": "curve25519sha256.Client"}, {"name": "curve25519sha256.Server"}, {"name": "dhGEXSHA.Client"}, {"name": "dhGEXSHA.Server"}, {"name": "dhGroup.Client"}, {"name": "dhGroup.Server"}, {"name": "ecdh.Client"}, {"name": "ecdh.Server"}, {"name": "mlkem768WithCurve25519sha256.Client"}, {"name": "mlkem768WithCurve25519sha256.Server"}]}], "references": [{"url": "https://go.dev/issue/79561"}, {"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"}, {"url": "https://go.dev/cl/781620"}, {"url": "https://pkg.go.dev/vuln/GO-2026-5013"}], "descriptions": [{"lang": "en", "value": "An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-191: Integer Underflow (Wrap or Wraparound)"}]}], "providerMetadata": {"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", "dateUpdated": "2026-05-22T02:31:26.754Z"}}}, "cveMetadata": {"cveId": "CVE-2026-46597", "state": "PUBLISHED", "dateUpdated": "2026-05-22T14:08:27.674Z", "dateReserved": "2026-05-15T17:35:00.813Z", "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "datePublished": "2026-05-22T02:31:26.754Z", "assignerShortName": "Go"}, "dataVersion": "5.2"}