CVE-2026-50538: Tight Decompressed Rows Oob Write

Row count computed from zlib decompression buffer capacity is used in a row processing function without bounds checking against remaining expected rows, risking an out-of-bounds write.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-50538-tight-decompressed-rows-oob-write --engine opengrep

Description

Row count computed from zlib decompression buffer capacity is used in a row processing function without bounds checking against remaining expected rows, risking an out-of-bounds write.