Unchecked Length Assumptions

Buffer sizing and allocation logic silently assumes exact length/sentinel semantics (NUL termination, fast/slow-path initialization, or ELF header sanity), so crafted inputs or minor path changes drive out-of-bounds writes or massive allocations.