Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.
Byte slice index or slice expression accessed before validating slice length with len(). This can trigger an out-of-bounds slice access panic on unexpected or truncated input.
Slicing SSH request payload without checking its length can cause a runtime panic if the payload is smaller than expected. Always check `len(req.Payload)` before indexing or slicing.
Virtio used-ring descriptor ID is used as an array index without bounds checking against the queue size. An untrusted virtio device or host backend can supply an out-of-bounds ID to trigger out-of-bounds access or control-flow hijacking. Validate that the descriptor ID is within queue bounds (e.g., id < vq->num).
