static inline void low_nmcpy(unsigned char *dst, char *src)
{
       memcpy(&dst[8], src, 8);
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.