The affected product does not properly control the allocation of resources. A user may be able to allocate unlimited memory buffers using API functions.
CWE-400, CWE-770