A specific type of security vulnerability where a program writes data past the end of a buffer, potentially corrupting data, crashing the program, or executing malicious code