Skip to content

x/vulndb: potential Go vuln in crypto/x509: CVE-2025-22865 #3421

@tatianab

Description

@tatianab

crypto/x509: ParsePKCS1PrivateKey panic with partial keys

Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic
when verifying that the key is well formed.

Thanks to Philippe Antoine (Catena cyber) for reporting this issue.

This is CVE-2025-22865 and Go issue https://go.dev/issue/71216.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions