Rank 6 in the 2024 CWE Top 25 (frequency x severity of CVEs). The software reads data past the end, or before the beginning, of the intended buffer, disclosing memory contents or causing crashes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.