CVE Intelligence

Golang.org/x/sys Golang.org/x/sys/windows vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Golang.org/x/sys Golang.org/x/sys/windows: 1 record(s), with affected versions and fixes.

CVE-2026-39824 Low · 3.3 CWE-190 May 22, 2026
Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows
NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-bit number of bytes), it returns a truncated string rather than an error.