DLL injection on Windows in runtime and syscall

2022-05-2518:01:46

Google

osv.dev

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.8%

Go on Windows misused certain LoadLibrary functionality, leading to DLL injection.

CPENameOperatorVersion
stdliblt1.12.2
stdliblt1.11.10
stdlibge1.12.0-0

Name	Operator	Version
stdlib	lt	1.12.2
stdlib	lt	1.11.10
stdlib	ge	1.12.0-0

References

go.dev/cl/165798

go.dev/issue/28978

go.googlesource.com/go/+/9b6e9f0c8c66355c0f0575d808b32f52c8c6d21c

groups.google.com/g/golang-announce/c/z9eTD34GEIs/m/Z_XmhTrVAwAJ