CVE-2026-13216: Assert Used For Length Validationcve-2026-13216-assert-used-for-length-validation
Length validation performed via assert() is disabled in production/release builds, which may cause integer underflows or buffer overflows during subsequent size calculations. Use runtime error checking (e.g., if (...) return ...) instead.