CVE-2025-9230: Bounds Check Underflow Size T Cast
A subtraction expression is cast to `size_t` and used in a bounds check. If the subtraction yields a negative result, the cast to `size_t` will underflow to a large positive value, bypassing the intended bounds check. Instead of `(size_t)($Y - $Z)`, perform the arithmetic after casting or rearrange the comparison to use addition.
Cgreprules fetch cve-2025-9230-bounds-check-underflow-size-t-cast --engine opengrepDescription
A subtraction expression is cast to `size_t` and used in a bounds check. If the subtraction yields a negative result, the cast to `size_t` will underflow to a large positive value, bypassing the intended bounds check. Instead of `(size_t)($Y - $Z)`, perform the arithmetic after casting or rearrange the comparison to use addition.
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.