CVE-2025-29918: Backtracking Infinite Loop Missing Progress Check

A parsing or matching loop restores a previous offset context without checking if progress was made. In scenarios such as zero-width or negated regex matches, the cursor might not advance, causing an infinite loop upon backtracking.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Cβ
greprules fetch cve-2025-29918-backtracking-infinite-loop-missing-progress-check --engine opengrep

Description

A parsing or matching loop restores a previous offset context without checking if progress was made. In scenarios such as zero-width or negated regex matches, the cursor might not advance, causing an infinite loop upon backtracking.