CVE-2025-47907

Incorrect results returned from Rows.Scan in database/sql

Published Aug 7, 2025 CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Description
Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-23921 Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.
History
Type Values Removed Values Added
First Time appeared Golang go
Weaknesses CWE-362
CPEs cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
Vendors & Products Golang go
Type Values Removed Values Added
First Time appeared Golang
Golang database Sql
Vendors & Products Golang
Golang database Sql
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.
Title Incorrect results returned from Rows.Scan in database/sql
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
Go
Published
Updated
Nov 4, 2025, 9:10 PM
Reserved
May 13, 2025, 11:31 PM
Status
Analyzed
Published
Aug 7, 2025, 4:15 PM
Modified
Jun 17, 2026, 9:28 AM
Severity
Important
Public date
Aug 7, 2025, 3:25 PM