Back to overview

CVE-2026-56852

Description
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Metadata

CVE ID
CVE-2026-56852
State
PUBLISHED
Assigner
Go
Reserved
2026-06-23 15:10 UTC
Published
2026-07-21 19:18 UTC
Last updated
2026-07-21 19:18 UTC
Vendor / Product
golang.org/x/text / golang.org/x/text/unicode/norm
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (1)
VendorProductPlatformVersions
golang.org/x/text golang.org/x/text/unicode/norm 0 < 0.39.0
Weakness (CWE)
CWESourceDescription
cna CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
Back to overview