CWE-786
Access of Memory Location Before Start of Buffer
The product reads or writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
Impactr finds and proves whether CWE-786 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.