A type of programming error where the program accesses or manipulates memory one byte beyond the bounds of an allocated buffer. This type of vulnerability often occurs in situations where the programmer makes an error in handling loop counters, array indices, or string termination characters. As a result, the program may read, write, or manipulate unintended memory locations, leading to unexpected behavior or security vulnerabilities.

Remediation:

• *Input Validation Strategy*: Assume all input is malicious and use an *"accept known good"* input validation strategy. Reject any input that does not conform to specifications
• When performing input validation, consider all potentially relevant properties including length, type, range of acceptable value, missing or extra inputs, syntax etc.
• Validate and correct calculations for any length argument, buffer size calculation or offset. Furthermore be way of relying on sentinels (special characters such as NUL) in untrusted inputs.