CVE-2026-81019: Unchecked Iv Offset Underflow

Pointer arithmetic calculates an offset backwards from the end of a buffer ($IV + $LEN - $OFFSET) without verifying that $LEN >= $OFFSET, potentially leading to buffer underflow or out-of-bounds access.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-81019-unchecked-iv-offset-underflow --engine opengrep

Description

Pointer arithmetic calculates an offset backwards from the end of a buffer ($IV + $LEN - $OFFSET) without verifying that $LEN >= $OFFSET, potentially leading to buffer underflow or out-of-bounds access.