data/cve/v5/GO-2026-4923.json

{
  "dataType": "CVE_RECORD",
  "dataVersion": "5.0",
  "cveMetadata": {
    "cveId": "CVE-2026-33817"
  },
  "containers": {
    "cna": {
      "providerMetadata": {
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc"
      },
      "title": "WITHDRAWN: out-of-range-index in go.etcd.io/bbolt",
      "descriptions": [
        {
          "lang": "en",
          "value": "(This report has been withdrawn with reason: \"Reporter and maintainer have confirmed this as false positive\"). Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt"
        }
      ],
      "affected": [
        {
          "vendor": "go.etcd.io/bbolt",
          "product": "go.etcd.io/bbolt",
          "collectionURL": "https://pkg.go.dev",
          "packageName": "go.etcd.io/bbolt",
          "programRoutines": [
            {
              "name": "Bucket.Stats"
            },
            {
              "name": "Bucket.CreateBucket"
            },
            {
              "name": "Bucket.CreateBucketIfNotExists"
            },
            {
              "name": "Bucket.Delete"
            },
            {
              "name": "Bucket.DeleteBucket"
            },
            {
              "name": "Bucket.ForEach"
            },
            {
              "name": "Bucket.ForEachBucket"
            },
            {
              "name": "Bucket.MoveBucket"
            },
            {
              "name": "Bucket.NextSequence"
            },
            {
              "name": "Bucket.Put"
            },
            {
              "name": "Bucket.SetSequence"
            },
            {
              "name": "Compact"
            },
            {
              "name": "Cursor.Delete"
            },
            {
              "name": "DB.Batch"
            },
            {
              "name": "DB.Begin"
            },
            {
              "name": "DB.Close"
            },
            {
              "name": "DB.Sync"
            },
            {
              "name": "DB.Update"
            },
            {
              "name": "DB.View"
            },
            {
              "name": "DefaultLogger.Debug"
            },
            {
              "name": "DefaultLogger.Debugf"
            },
            {
              "name": "DefaultLogger.Error"
            },
            {
              "name": "DefaultLogger.Errorf"
            },
            {
              "name": "DefaultLogger.Fatal"
            },
            {
              "name": "DefaultLogger.Fatalf"
            },
            {
              "name": "DefaultLogger.Info"
            },
            {
              "name": "DefaultLogger.Infof"
            },
            {
              "name": "DefaultLogger.Panic"
            },
            {
              "name": "DefaultLogger.Panicf"
            },
            {
              "name": "DefaultLogger.Warning"
            },
            {
              "name": "DefaultLogger.Warningf"
            },
            {
              "name": "Open"
            },
            {
              "name": "Tx.Check"
            },
            {
              "name": "Tx.Commit"
            },
            {
              "name": "Tx.Copy"
            },
            {
              "name": "Tx.CopyFile"
            },
            {
              "name": "Tx.CreateBucket"
            },
            {
              "name": "Tx.CreateBucketIfNotExists"
            },
            {
              "name": "Tx.DeleteBucket"
            },
            {
              "name": "Tx.ForEach"
            },
            {
              "name": "Tx.MoveBucket"
            },
            {
              "name": "Tx.Rollback"
            },
            {
              "name": "Tx.WriteTo"
            }
          ],
          "defaultStatus": "affected"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "lang": "en",
              "description": "CWE-125: Out-of-bounds Read"
            }
          ]
        }
      ],
      "references": [
        {
          "url": "https://github.com/etcd-io/bbolt/pull/1171/changes/386d5b69785937d1aa20cb25c8439404cf398143"
        },
        {
          "url": "https://github.com/golang/vulndb/issues/4923"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4923"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Quoc Bui (github.com/quocvibui)"
        }
      ]
    }
  }
}