CVE-2025-34468: C Unbounded Memcpy Into Fixed Char Buffer From Struct Length
memcpy() copies into a fixed-size local char buffer using a length taken from a struct field, without first checking that the length is less than sizeof(destination). If the struct field is attacker-controlled (e.g. a hostname, URI, or other length-prefixed input), this is a stack-based buffer overflow (CWE-121 / CWE-787). This is the exact root-cause patter
greprules fetch cve-2025-34468-c-unbounded-memcpy-into-fixed-char-buffer-from-struct-length --engine opengrepDescription
memcpy() copies into a fixed-size local char buffer using a length taken from a struct field, without first checking that the length is less than sizeof(destination). If the struct field is attacker-controlled (e.g. a hostname, URI, or other length-prefixed input), this is a stack-based buffer overflow (CWE-121 / CWE-787). This is the exact root-cause patter
Detection target
Not provided
Recommended fix
Not provided
False-positive notes
Not provided
Community feedback
Sign in to report false positives, mark this rule useful, or suggest metadata improvements.