CWE-823
Use of Out-of-range Pointer Offset
The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.
Impactr finds and proves whether CWE-823 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.