CVE-2026-29775: Target Exact Allocation For Vulnerable Cache Cells
The 'cells' structure member is allocated exactly to a defined maximum number of elements without padding. If index guards are off-by-one (as noted in FreeRDP CVE-2026-29775), this direct allocation enables heap out-of-bounds memory access. Ensure the element count is properly padded (e.g., + 1) to mitigate potential off-by-one access violations.
Cgreprules fetch cve-2026-29775-target-exact-allocation-for-vulnerable-cache-cells --engine opengrepDescription
The 'cells' structure member is allocated exactly to a defined maximum number of elements without padding. If index guards are off-by-one (as noted in FreeRDP CVE-2026-29775), this direct allocation enables heap out-of-bounds memory access. Ensure the element count is properly padded (e.g., + 1) to mitigate potential off-by-one access violations.
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.