← Back to CVE search

CVE-2026-39824

NTUnicodeString

Description

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-bit number of bytes), it returns a truncated string rather than an error.

CVSS 3.3EPSS 0.11399999999999999%Risk 0.33
View source
Published
2026-05-22 20:16:33
Affected versions
unknown
Type
Other
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N