CVE-2025-58188
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
Validating certificate chains which contain DSA public keys can cause programs to panic, due to an interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains.
Risk Assessment
An attacker can supply a specially crafted certificate chain, causing application crash (denial of service). The risk applies to systems validating certificates from untrusted sources.
Recommendation
Update the software to a version containing the fix. Avoid validating certificates from untrusted sources without additional safeguards.
Other vulnerabilities in Certificate validation
See all- CVE-2026-32281High
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service.
- CVE-2025-61727Medium
An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.
Original NVD description (English source)
Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS