CVE-2026-33165: Missing Reallocation Parameter Check

A reallocation condition checks two parameters but fails to verify a third parameter that is passed to the allocation function. If only the third parameter changes, the reallocation is incorrectly skipped and the object retains stale state. This can lead to out-of-bounds memory accesses.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C++
greprules fetch cve-2026-33165-missing-reallocation-parameter-check --engine opengrep

Description

A reallocation condition checks two parameters but fails to verify a third parameter that is passed to the allocation function. If only the third parameter changes, the reallocation is incorrectly skipped and the object retains stale state. This can lead to out-of-bounds memory accesses.