CWE-475
Undefined Behavior for Input to API
The behavior of this function is undefined unless its control parameter is set to a specific value.
Impactr finds and proves whether CWE-475 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.