CVE-2026-32853: Unchecked Sequential Memcpy Parsing

A buffer is parsed iteratively using sequential `memcpy` operations and pointer increments without any preceding bounds check. A malicious input controlling the loop condition or structural data lengths could induce an out-of-bounds read, risking data disclosure or denial of service crashes. Validate the pointer against the buffer end limit before attempting

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-32853-unchecked-sequential-memcpy-parsing --engine opengrep

Description

A buffer is parsed iteratively using sequential `memcpy` operations and pointer increments without any preceding bounds check. A malicious input controlling the loop condition or structural data lengths could induce an out-of-bounds read, risking data disclosure or denial of service crashes. Validate the pointer against the buffer end limit before attempting