CWE-562
Return of Stack Variable Address
A function returns the address of a stack variable, which will cause unintended program behavior, typically in the form of a crash.
Impactr finds and proves whether CWE-562 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.