possibly introduce buffer overflows. For most format string vulnerabilities, the intended format
string should have been a constant, i.e., it was never intended to be mutable by any actor
Properties
stack-based buffer overflow: violates non-mutability of the stack and adjacent variables