CVE-2026-27820: Cve 2026 27820 Conditional Buffer Expansion Before Memmove Prependcve-2026-27820-cve-2026-27820-conditional-buffer-expansion-before-memmove-prepend
A buffer expansion function is called inside a conditional before a memmove-based prepend (memmove(ptr + len, ptr, filled) / memmove(ptr, src, len)). If the guard condition does not verify that the buffer has at least 'filled + len' bytes of free capacity – i.e., it only checks whether any free space exists rather than enough free space for 'len' additional
