What is Format String Vulnerability?

A format string vulnerability occurs when a program uses user-supplied input as a format string in functions like printf. Attackers can exploit this vulnerability to read from or write to arbitrary memory locations, leading to privilege escalation.

Related terms