Executive Summary

This vulnerability occurs when a malicious file built with cmd/go uses the "#cgo pkg-config:" directive in a Go source file to pass command-line arguments to the Go pkg-config command. An attacker can supply a "--log-file" argument through this directive, causing pkg-config to write to a file at an attacker-controlled location with partial control over the file content.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can allow an attacker to write to files at locations they control, potentially leading to unauthorized file modification or creation. This could be exploited to overwrite important files or inject malicious content, impacting system integrity or security.

Useful 0 Not Useful 0