CVE-2026-49510: Integer Overflow Multiplication Bounds Check

Detected an integer multiplication assigned to a variable, followed by an upper-bound check (`>` or `>=` on the multiplied variable). Because the variable base type is a 32-bit (or smaller) integer, large values can cause the multiplication to overflow and wrap around to a small or negative value. This wrapped value will bypass the bounds check, potentially

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0C++β
greprules fetch cve-2026-49510-integer-overflow-multiplication-bounds-check --engine opengrep

Description

Detected an integer multiplication assigned to a variable, followed by an upper-bound check (`>` or `>=` on the multiplied variable). Because the variable base type is a 32-bit (or smaller) integer, large values can cause the multiplication to overflow and wrap around to a small or negative value. This wrapped value will bypass the bounds check, potentially