Some API functions permit by-design writing or copying data into a given buffer. Since the client controls these parameters, an attacker could rewrite the memory in any location of the affected product.
Solution:
Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.
| Link | Tags |
|---|---|
| https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01 | third party advisory us government resource |