In MAT decoder uses 32-bit arithmetic due to incorrect parenthesization resulting in a heap over-read.
=================================================================
==969652==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x506000003b40 at pc 0x555557b2a926 bp 0x7fffffff4c80 sp 0x7fffffff4c70
READ of size 8 at 0x506000003b40 thread T0
{
"cwe_ids": [
"CWE-125"
],
"github_reviewed": true,
"github_reviewed_at": "2026-03-10T21:02:41Z",
"nvd_published_at": "2026-03-10T07:43:44Z",
"severity": "MODERATE"
}