CVE-2026-78701: C Io Recv Unbounded Buffer Memcpy

Data is copied from an internal buffer struct into a caller-provided buffer using the internal buffer's count without validating or bounding against the caller-supplied length parameter. This can result in a buffer overflow if the internal buffer contains more data than the destination buffer capacity.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-78701-c-io-recv-unbounded-buffer-memcpy --engine opengrep

Description

Data is copied from an internal buffer struct into a caller-provided buffer using the internal buffer's count without validating or bounding against the caller-supplied length parameter. This can result in a buffer overflow if the internal buffer contains more data than the destination buffer capacity.