The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.18-go-dbgsym": "1.18.1-1ubuntu1~20.04.1", "golang-1.18": "1.18.1-1ubuntu1~20.04.1", "golang-1.18-doc": "1.18.1-1ubuntu1~20.04.1", "golang-1.18-go": "1.18.1-1ubuntu1~20.04.1", "golang-1.18-src": "1.18.1-1ubuntu1~20.04.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.18-go-dbgsym": "1.18.1-1ubuntu1", "golang-1.18": "1.18.1-1ubuntu1", "golang-1.18-doc": "1.18.1-1ubuntu1", "golang-1.18-go": "1.18.1-1ubuntu1", "golang-1.18-src": "1.18.1-1ubuntu1" } ] }