CVE-2026-6104: Strncmp Oob Read Null Check
Using `strncmp` or its variants with an explicit length, followed by checking the null terminator at that length index via `$X[$L] == '\0'`, can result in an out-of-bounds read. If the strings match up to an embedded null byte that occurs before the specified length, `strncmp` returns 0 early, and the subsequent `$X[$L]` access reads out of bounds. To fix, v
Cgreprules fetch cve-2026-6104-strncmp-oob-read-null-check --engine opengrepDescription
Using `strncmp` or its variants with an explicit length, followed by checking the null terminator at that length index via `$X[$L] == '\0'`, can result in an out-of-bounds read. If the strings match up to an embedded null byte that occurs before the specified length, `strncmp` returns 0 early, and the subsequent `$X[$L]` access reads out of bounds. To fix, v
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.