---
id: CVE-2026-46597
aliases:
  - GO-2026-5013
  - GHSA-q4h4-gmj2-qvw2
title: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh
summary: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh
severity: high
cvss: 7.5
vendor: x
product: golang.org/x/crypto
ecosystem: go
affected:
  - golang.org/x/crypto < 0.52.0
patched:
  - golang.org/x/crypto 0.52.0
published: '2026-05-22'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T10:41:36.216580513Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GO-2026-5013'
references:
  - url: 'https://go.dev/issue/79561'
  - url: 'https://groups.google.com/g/golang-announce/c/a082jnz-LvI'
  - url: 'https://go.dev/cl/781620'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-46597'
  - url: 'https://pkg.go.dev/vuln/GO-2026-5013'
  - url: 'https://github.com/advisories/GHSA-q4h4-gmj2-qvw2'
tags:
  - osv
  - go
  - ghsa
epss: 0.0062
epssPercentile: 0.47398
cvssSource: ghsa
cwe:
  - CWE-704
ingestedAt: '2026-06-26T16:43:14.199Z'
---

## Overview

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

## Affected packages

- `golang.org/x/crypto < 0.52.0`

## Remediation

Upgrade to a patched release:

- `golang.org/x/crypto 0.52.0`