CWE-469
Use of Pointer Subtraction to Determine Size
The product subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.
Impactr finds and proves whether CWE-469 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.