Lucene search

K
cve[email protected]CVE-2024-24787
HistoryMay 08, 2024 - 4:15 p.m.

CVE-2024-24787

2024-05-0816:15:08
web.nvd.nist.gov
39
darwin
go module
cgo
arbitrary code execution
apple
ld
lto library

7.8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.6%

On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a “#cgo LDFLAGS” directive.

7.8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.6%