CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Impactr finds and proves whether CWE-125 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.