🛡️ Security

Out-of-Bounds Write

A memory-safety bug (CWE-787) in which a program writes data past the beginning or end of the buffer it allocated, corrupting adjacent memory. In file parsers it is typically triggered by a length or offset in attacker-controlled input and can be turned into arbitrary code execution.

📚 Deep Dive

Learn Article

How a Crafted Image or PDF Becomes Code Execution on a Phone

"Processing a maliciously crafted file may lead to arbitrary code execution" is Apple's most common advisory line. What a parser out-of-bounds write is, how it goes zero-click, and what you control.

intermediate 5 min read

Back to Glossary