CWE-761
Free of Pointer not at Start of Buffer
The product calls free() on a pointer to a memory resource that was allocated on the heap, but the pointer is not at the start of the buffer.
Impactr finds and proves whether CWE-761 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.