CWE-911
Improper Update of Reference Count
The product uses a reference count to manage a resource, but it does not update or incorrectly updates the reference count.
Impactr finds and proves whether CWE-911 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.