AIKIDO-2025-10950

TL;DR

Affected versions of this package are vulnerable to an integer overflow in offset calculation, where the package searches for a value within input using an offset also derived from input, allowing integer overflow. An attacker can exploit this by supplying malicious input that triggers an overflow, leading to out-of-bounds memory access, which may result in denial of service, information disclosure, or arbitrary code execution.