CVE-2026-30923: Modsecurity Libinjection Error Mishandling
Treating the return value of `libinjection` functions as a simple boolean (or comparing with 0) fails to properly handle libinjection v4 parser errors. Negative error codes evaluate to true, falsely indicating an attack and potentially causing out-of-bounds reads on uninitialized fingerprint arrays. Use `injection_result_t` and check against explicitly defin
Cgreprules fetch cve-2026-30923-modsecurity-libinjection-error-mishandling --engine opengrepDescription
Treating the return value of `libinjection` functions as a simple boolean (or comparing with 0) fails to properly handle libinjection v4 parser errors. Negative error codes evaluate to true, falsely indicating an attack and potentially causing out-of-bounds reads on uninitialized fingerprint arrays. Use `injection_result_t` and check against explicitly defin
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.