The product writes data past the end, or before the beginning, of the intended buffer.
Source: MITRE CWE™ — CWE-787