2. CWE-131 : Incorrect Calculation of Buffer Size
MIT-12 Use a CPU and operating system that offers Data Execution Protection (NX) or its equivalent [R.XX.A]
[R.XX.B].
1. CWE-120 : Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')