CVE-2024-55627: Flawed Interval Intersection

Checking for interval overlap by verifying if the endpoints of one interval fall within another interval is logically flawed. This fails to detect overlap when the first interval completely encapsulates the second. Use the mutually exclusive bounds check instead: '!(end1 < start2 || end2 < start1)'.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Cβ
greprules fetch cve-2024-55627-flawed-interval-intersection --engine opengrep

Description

Checking for interval overlap by verifying if the endpoints of one interval fall within another interval is logically flawed. This fails to detect overlap when the first interval completely encapsulates the second. Use the mutually exclusive bounds check instead: '!(end1 < start2 || end2 < start1)'.