CVE-2026-13216: Assert Used For Length Validation

Length validation performed via assert() is disabled in production/release builds, which may cause integer underflows or buffer overflows during subsequent size calculations. Use runtime error checking (e.g., if (...) return ...) instead.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-13216-assert-used-for-length-validation --engine opengrep

Description

Length validation performed via assert() is disabled in production/release builds, which may cause integer underflows or buffer overflows during subsequent size calculations. Use runtime error checking (e.g., if (...) return ...) instead.