AIKIDO-2026-605808

TL;DR

vortex-file parses a Vortex file's postscript and footer segment map when opening a file. The segment offsets and lengths declared in the footer are used to slice the backing buffer without being validated against the actual file or buffer size, and alignment exponents are read with a panicking conversion. A crafted or corrupted file that declares a segment past the end of the buffer, an underflowing offset, or an oversized alignment exponent causes the reader to panic during open instead of returning an error. The fix validates every segment's offset and length against the file size and uses fallible, bounds-checked slicing and alignment parsing.