CWE-244
Improper Clearing of Heap Memory Before Release ('Heap Inspection')
Using realloc() to resize buffers that store sensitive information can leave the sensitive information exposed to attack, because it is not removed from memory.
Impactr finds and proves whether CWE-244 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.