CWE-1325
Improperly Controlled Sequential Memory Allocation
The product manages a group of objects or resources and performs a separate memory allocation for each object, but it does not properly limit the total amount of memory that is consumed by all of the combined objects.
Impactr finds and proves whether CWE-1325 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.