CVE-2026-32135: Urldecoding Off By One Overflowcve-2026-32135-urldecoding-off-by-one-overflow
A string is decoded into a dynamically allocated buffer that is restricted to the exact size of the input string length, but a null byte is unconditionally written at the end. This leads to an off-by-one heap buffer overflow if the input does not shrink during decoding. Ensure that the buffer allocation explicitly reserves space for the null terminator (e.g.
