CVE-2026-32854: Unchecked Strchr Deref

Missing NULL check on the result of `strchr` or `strrchr` before using it in string/memory operations. This can lead to a NULL pointer dereference if the character is not found.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-32854-unchecked-strchr-deref --engine opengrep

Description

Missing NULL check on the result of `strchr` or `strrchr` before using it in string/memory operations. This can lead to a NULL pointer dereference if the character is not found.