CVE-2026-39824
Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows
NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-bit number of bytes), it returns a truncated string rather than an error.
CVSS 3.1 · 3.3 Low
EPSS < 1%
KEV · Not listed
Vendors
Products