CVE-2022-24675: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 10% chance of exploitation in the next 30 days.

encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• Golang Go: before 1.17.9 (fixed in 1.17.9); from 1.18.0, before 1.18.1 (fixed in 1.18.1)
• Netapp Kubernetes Monitoring Operator: affected versions not specified

Published 2022-04-20. Last modified 2026-06-17.