Skip to main content
The number of bytes copied from $STR does not include the NUL terminator. This can lead to an out-of-bounds read and information disclosure. One extra byte should be added to the length to ensure that the NUL terminator is copied.
Likelihood: LOW
Confidence: HIGH
CWE:
- CWE-125: Out-of-bounds Read