CVE-2026-33811

HIGH 7.5

Crash when handling long CNAME response in net

CVSS Score

7.5

EPSS Score

0.0%

EPSS Percentile

0th

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

Vendor	go standard library
Product	net
Published	May 7, 2026
Last Updated	Aug 5, 2026

Stay Ahead of the Next One

Get instant alerts for go standard library net

Be the first to know when new high vulnerabilities affecting go standard library net are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Go standard library / net

0 < 1.25.10 1.26.0-0 < 1.26.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

go.dev: https://go.dev/issue/78803 go.dev: https://go.dev/cl/767860 groups.google.com: https://groups.google.com/g/golang-announce/c/qcCIEXso47M pkg.go.dev: https://pkg.go.dev/vuln/GO-2026-4981 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-33811 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2467822 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42079 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41019 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42078 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:50319 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42082 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:50336 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:48151 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36796 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39810 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42150 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42151 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42240 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:49703 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39272 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:35832 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34357 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42946 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39573 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:38504 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39266 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36776 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39319 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36617 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34359 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:47952 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34364 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42852 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:47149 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:43692 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36319 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36625 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36207 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42132 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33574 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36651 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40945 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40118 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23262 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23264 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41928 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:50300 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:43038 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42644 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36648 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:35994 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:35995 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:35993 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33120 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33123 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33142 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33150 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:50205 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36797 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42043 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42047 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42050 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42051 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42049 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42048 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41030 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:44622 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:46885 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41055 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:47735

Credits

hamayanhamayan