CVE-2026-40355: Unchecked Custom Array Pointercve-2026-40355-unchecked-custom-array-pointer
A pointer returned by a custom offset-based extractor function is mapped and dereferenced in a loop without a validation boundary for NULL. This can lead to a NULL pointer dereference.