CWE-806
Buffer Access Using Size of Source Buffer
The product uses the size of a source buffer when reading from or writing to a destination buffer, which may cause it to access memory that is outside of the bounds of the buffer.
Impactr finds and proves whether CWE-806 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.