CVE-2026-19082: Ascii Size Underflow Ternary

Unchecked subtraction of 1 from a size expression in a ternary operator can cause integer underflow or negative length values when size is 0, leading to out-of-bounds heap reads.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-19082-ascii-size-underflow-ternary --engine opengrep

Description

Unchecked subtraction of 1 from a size expression in a ternary operator can cause integer underflow or negative length values when size is 0, leading to out-of-bounds heap reads.