CVE-2026-55211: Unvalidated Dimension Vector Allocation

Dimensions parsed from input are multiplied to allocate a vector without verifying that the input buffer length (end - start) is sufficient for the requested number of elements.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0C++
greprules fetch cve-2026-55211-unvalidated-dimension-vector-allocation --engine opengrep

Description

Dimensions parsed from input are multiplied to allocate a vector without verifying that the input buffer length (end - start) is sufficient for the requested number of elements.