golang.org/x/sys

2 results · Feed

• Low 3.3
  CVE-2026-39824

  Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

  NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-bit number of bytes), it returns a truncated string rather than an error.

  golang.org/x/sys golang.org/x/sys/windows katib-suggestion-hyperopt katib-earlystopping Windows Ubuntu Azure Linux Wolfi Go
  May 22, 2026
• Medium 5.3
  CVE-2022-29526

  golang.org/x/sys/unix has Incorrect privilege reporting in syscall

  Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.

  golang stdlib k3d golang-1.8 Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jun 22, 2022