CVE-2022-24675

CVE-2022-24675 is a stack overflow vulnerability in the encoding/pem package of Go versions prior to 1.17.9 and 1.18.1, affecting various products including Fedora and Kubernetes Monitoring Operator. With a CVSS score of 7.5 (High), it can be triggered remotely without user interaction by providing a large amount of PEM data, leading to a denial of service (availability impact). There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this vulnerability.