Report

In wget's VMS compatibility code (src/vms.c), [REDACTED]. If cuserid()/sys$getuai() return longer-than-expected strings, this leads to memory corruption. The code is guarded by #if __CRTL_VER < 70000000 but is still a critical unsafe pattern.

938c7e1d-2157-4ec3-a1f2-9bd23d701903

In wget's VMS compatibility code (src/vms.c), [REDACTED]. If cuserid()/sys$getuai() return longer-than-expected strings, this leads to memory corruption. The code is guarded by #if __CRTL_VER < 70000000 but is still a critical unsafe pattern.