CWE-466
Return of Pointer Value Outside of Expected Range
A function can return a pointer to memory that is outside of the buffer that the pointer is expected to reference.
Impactr finds and proves whether CWE-466 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.