CVE-2026-76989: Cipster Encap Oversized Packet Return Length

When discarding an oversized packet payload, returning a positive packet length rather than an error status causes callers to treat uninitialized buffer memory as valid packet data, leading to out-of-bounds reads.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0C++
greprules fetch cve-2026-76989-cipster-encap-oversized-packet-return-length --engine opengrep

Description

When discarding an oversized packet payload, returning a positive packet length rather than an error status causes callers to treat uninitialized buffer memory as valid packet data, leading to out-of-bounds reads.