Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
fmtlib/fmt
main @ 588b3a0
6
Fixes
1
CVEs
HIGH
Peak severity
50.0%
Coverage
Highlights
Memory Corruption: 3 prior fixes. Scrutinize any change in this area.
include/fmt/core.h: most-fixed (2 issues). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Corruption: Integer underflows in fixed_buffer_traits::limit can bypass bounds checks, leading to out-of-bounds writes during formatted output generation and posing a critical memory corruption risk.
Integer Overflow: The parse_nonnegative_int function is susceptible to integer overflows where extremely large numbers bypass wrap-around checks, potentially corrupting subsequent memory size calculations.
Memory Safety: Formatting escaped or debug strings into back-inserting containers without pre-calculating the exact required space can cause buffer overflows.