golang.org/x/sys

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Low 3.3

CVE-2026-39824

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-bit number of bytes), it returns a truncated string rather than an error.

golang.org/x/sys golang.org/x/sys/windows katib-suggestion-hyperopt katib-earlystopping Windows Ubuntu Azure Linux Wolfi Go

May 22, 2026