cve 2025 58185

CVE-2025-58185 is a memory-exhaustion vulnerability in Go's encoding/asn1 parsing logic that can cause large allocations when parsing maliciously crafted DER payloads. While Microsoft's Azure Linux distribution includes the implicated open-source library and is potentially affected, the vulnerability is not exclusive to Microsoft products. The core issue lies in the parser's handling of DER data, which can lead to denial of service. This tag covers discussions about the scope, impact, and technical details of CVE-2025-58185, including its relevance to Azure Linux and other systems using the vulnerable Go library.