CVE-2025-48879: Unvalidated Buffer Consumption Loop

A while loop iterates based on the length of a buffer, but delegates its processing to a function without subsequently verifying whether progress was made (e.g. tracking if the buffer length actually decreased). If the designated processor function silently returns on malformed data rather than erroring or consuming the bad data, this will result in an infin

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2025-48879-unvalidated-buffer-consumption-loop --engine opengrep

Description

A while loop iterates based on the length of a buffer, but delegates its processing to a function without subsequently verifying whether progress was made (e.g. tracking if the buffer length actually decreased). If the designated processor function silently returns on malformed data rather than erroring or consuming the bad data, this will result in an infin