Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
4797
Downloads
7.4M
Verified
4797
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-59949: Util Bytebufferutils Java Cwe 000 Cve 2026 59949cve-2026-59949-util-bytebufferutils-java-cwe-000-cve-2026-59949

A byte array is passed into a method or processed by a bounds check wrapper without sound bounds validation. Using `off + len - 1` can cause integer overflow, and skipping checks when `len == 0` can bypass offset boundaries. Attackers can trigger out-of-bounds reads/writes in native code relying on this, leading to information disclosure or JVM crashes. Use

by Provallyupdated 2026-09-02Apache-2.0
2780 direct278 via packs
downloads
72quality
All matching rules loaded.