VYPR
Unrated severityNVD Advisory· Published Feb 5, 2026· Updated Feb 5, 2026

Potential code smuggling via doc comments in cmd/cgo

CVE-2025-61732

Description

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

Affected products

2
  • Go/cgollm-create
  • Go toolchain/cmd/cgov5
    Range: 0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.