  void Create(service_manager::mojom::ServiceFactoryRequest request) {
    service_factory_bindings_.AddBinding(this, std::move(request));
  }

The product writes data past the end, or before the beginning, of the intended buffer.