[3]. For example, an application expecting five-digit postcode therefore the
programmer only allocates enough memory for the perimeter.
If an attacker enters more than five digits for example
hundreds of digit, the application will end up using more
memory than what it should.