CVE-2026-44050: Netatalk Cnid Dbd Unbounded Readt Namelen
`readt()` reads `$RQST->namelen` bytes (attacker-controlled length from the CNID wire-format request header) into the fixed-size `$RQST->name` buffer without first validating `$RQST->namelen <= MAXPATHLEN`. This is the heap-based buffer overflow pattern fixed in CVE-2026-44050. Add a guard `if ($RQST->namelen > MAXPATHLEN) { ...; return 0; }` before this rea
Cgreprules fetch cve-2026-44050-netatalk-cnid-dbd-unbounded-readt-namelen --engine opengrepDescription
`readt()` reads `$RQST->namelen` bytes (attacker-controlled length from the CNID wire-format request header) into the fixed-size `$RQST->name` buffer without first validating `$RQST->namelen <= MAXPATHLEN`. This is the heap-based buffer overflow pattern fixed in CVE-2026-44050. Add a guard `if ($RQST->namelen > MAXPATHLEN) { ...; return 0; }` before this rea
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.