CVE-2024-43700: Unbounded Pointer Increment Sprintf

A buffer pointer is advanced using the return value of `sprintf` or directly appended without bounds checking. This can lead to a stack or heap buffer overflow. Ensure that the remaining buffer limit is explicitly checked before appending.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2024-43700-unbounded-pointer-increment-sprintf --engine opengrep

Description

A buffer pointer is advanced using the return value of `sprintf` or directly appended without bounds checking. This can lead to a stack or heap buffer overflow. Ensure that the remaining buffer limit is explicitly checked before appending.