buffer to be allocated and leads to a buffer overflow (CWE-120).
COMPOSITE: a combination of two or more separate weaknesses that can create a vulnerability,
but only if these weaknesses occur simultaneously. For example, a symlink following attack
involves several component weaknesses including filename predictability (CWE-340),