← Back to browse · API

CVE-2024-24790

Severity
CRITICAL
CVSS
9.8
EPSS
0.01952
Risk score
39.88
CISA KEV
No
PoC
No
Published
2024-06-05
Modified
2025-02-13
First seen
2026-08-07
Aliases
EUVD-2024-22167, GHSA-49GW-VXVF-FC2G
Products
Go standard library:net/netip 0 <1.21.11, Go standard library:net/netip 1.22.0-0 <1.22.4
Sources
euvd EUVD-2024-22167

Description

The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

References