The program copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
CWE-120 (Buffer Copy without Checking Size of Input) is classified as critical severity and falls under the OWASP Top 10 category A06:2021.
The official CWE entry is maintained by MITRE at cwe.mitre.org/data/definitions/120.html.
Orbis AppSec automatically detects and fixes Buffer Copy without Checking Size of Input vulnerabilities in your code with AI-powered static analysis.