Input Processing Flaw in Windows Affecting Go Language Functionality

CVE-2026-39836

What is CVE-2026-39836?

An input processing flaw has been identified in the Dial and LookupPort functions of the Go programming language used on Windows systems. This vulnerability arises when the functions receive input containing a NUL (0) character, leading to a panic condition that could disrupt application execution and compromise overall system stability. Developers utilizing Go on Windows should ensure they implement proper input validation to prevent such failures and maintain robust application performance.

References