CVE-2025-66216: Ais Catcher Cve 2025 66216 Bit Byte Bounds Confusion
Bit-vs-byte unit confusion in bounds check against MAX_AIS_LENGTH. The constant MAX_AIS_LENGTH is defined in bits (MAX_AIS_BYTES * 8 = 1024), but shifting the index by `>> 3` converts it to bytes before the comparison. The guard therefore only fires when the bit index reaches ~8x the real buffer capacity, permitting a heap buffer overflow in the subsequent b
C++greprules fetch cve-2025-66216-ais-catcher-cve-2025-66216-bit-byte-bounds-confusion --engine opengrepDescription
Bit-vs-byte unit confusion in bounds check against MAX_AIS_LENGTH. The constant MAX_AIS_LENGTH is defined in bits (MAX_AIS_BYTES * 8 = 1024), but shifting the index by `>> 3` converts it to bytes before the comparison. The guard therefore only fires when the bit index reaches ~8x the real buffer capacity, permitting a heap buffer overflow in the subsequent b
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.