CVE-2026-42859: Fixed Stack Buffer Crypto Overflow
A static array is cast to a struct and passed to a cryptographic function. This can lead to a stack buffer overflow if the encryption configuration, payload, or key size exceeds the statically allocated bounds. Ensure dynamic payloads are accommodated by allocating buffers organically using actual operational size limits, or strictly enforcing buffer bounds
Cgreprules fetch cve-2026-42859-fixed-stack-buffer-crypto-overflow --engine opengrepDescription
A static array is cast to a struct and passed to a cryptographic function. This can lead to a stack buffer overflow if the encryption configuration, payload, or key size exceeds the statically allocated bounds. Ensure dynamic payloads are accommodated by allocating buffers organically using actual operational size limits, or strictly enforcing buffer bounds
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.