Improper Restriction of Operations within the Bounds of a Memory Buffer
{% endblock %}
CWE-119:
Improper Restriction of Operations within the Bounds of a Memory
Buffer
The software performs operations on a memory buffer, but it can read from or
write to a memory location that is outside of the intended boundary of the
buffer.
Direct memory addresses are permitted by some programming languages, which do
not always guarantee that they are valid for the memory buffer being accessed.
This may result in read or write operations being made on memory regions
connected to internal programme data, other variables, or data structures. As
a result, a hacker might be able to run arbitrary code, change the intended
control flow, view private data, or bring down the system.