SYM_GO_0011 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Use of Inherently Dangerous Function

Property Value
Language go
Severity low
CWE CWE-242: Use of Inherently Dangerous Function
Confidence Level Low
Impact Level Low
Likelihood Level Low

Description

Using Go's 'unsafe' package bypasses the language's type safety and memory protections, making it easy to introduce bugs like buffer overflows or memory corruption. This can lead to unstable or insecure code if not handled with extreme care.

Impact

If exploited, vulnerabilities from improper use of the 'unsafe' package can allow attackers to execute arbitrary code, crash the application, or read and write sensitive memory. This can compromise data integrity, expose confidential information, and potentially enable full system compromise.