CVE-2025-47914Published
Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-47914 · Microsoft / collected KEV context
cve-program · CVE-2025-47914
- https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
- https://go.dev/cl/721960
- https://go.dev/issue/76364
- https://pkg.go.dev/vuln/GO-2025-4135
euvd · EUVD-2025-198227
- https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
- https://go.dev/cl/721960
- https://go.dev/issue/76364
- https://pkg.go.dev/vuln/GO-2025-4135
nvd · CVE-2025-47914
- https://go.dev/cl/721960
- https://go.dev/issue/76364
- https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
- https://pkg.go.dev/vuln/GO-2025-4135
osv · GHSA-f6x5-jh6r-wrfv
- https://nvd.nist.gov/vuln/detail/CVE-2025-47914
- https://go.dev/cl/721960
- https://go.dev/issue/76364
- https://go.googlesource.com/crypto
- https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
- https://pkg.go.dev/vuln/GO-2025-4135
osv · GO-2025-4135
Related operational evidence
Explicit CVE identifiers- SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read. · Advisory content revised · 7 Nov 2026
- SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read. · Advisory content revised · 1 Nov 2026
- SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read. · Advisory content revised · 29 Oct 2026