PT-2025-47589 · Go · Go

·

CVE-2025-13425

·

Published

2025-11-20

·

Updated

2026-07-30

CVSS v4.0

4.8

Medium

VectorAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L
Name of the Vulnerable Software and Affected Versions versions prior to 2025-13425
Description A flaw exists in the filesystem traversal fallback path, specifically within the fs/diriterate/diriterate.go:Next() function. This issue causes an overindex on an empty slice when the ReadDir function returns nil for an empty directory, leading to a panic and a denial of service condition, potentially crashing the application.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-13425
GHSA-F786-75F3-74XJ
GO-2025-4149
OPENSUSE-SU-2026:21483-1
SUSE-SU-2025:4395-1

Affected Products

Go