Skip to main content

NULL Pointer Dereference

CVE-2018-17142

High
7.5/10

Summary

The html package (aka x/net/html) prior to 0.0.0-20180925071336-cf3bd585ca2a in Go mishandles "<math><template><mo><template>", leading to a "panic: runtime error" in parseCurrentToken in "parse.go" during an "html.Parse call".

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-476 - NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

Advisory Timeline

  • Published