PT-2026-30699 · Go+1 · Go.Etcd.Io/Bbolt

Quoc Bui · Published 2026-04-06 · Updated 2026-04-06 · CVE-2026-33817

Mitre

CVSS v3.1

6.2

Medium

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-33817

GO-2026-4923

Affected Products

Go.Etcd.Io/Bbolt

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-33817 · Security Note
• https://osv.dev/vulnerability/GO-2026-4923 · Vendor Advisory
• https://github.com/etcd-io/bbolt/pull/1171/changes/386d5b69785937d1aa20cb25c8439404cf398143 · Note
• https://github.com/golang/vulndb/issues/4923 · Note
• https://pkg.go.dev/vuln/GO-2026-4923 · Note