CVE-2026-48686: Unchecked Prefix Length Memcpy Overflow

Missing upper bounds check on a length read from a buffer before calculating byte size can cause stack buffer overflow when copied into a smaller fixed-size destination.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C++
greprules fetch cve-2026-48686-unchecked-prefix-length-memcpy-overflow --engine opengrep

Description

Missing upper bounds check on a length read from a buffer before calculating byte size can cause stack buffer overflow when copied into a smaller fixed-size destination.