On the function genIntelMEVersion in /osquery/tables/system/linux/intel_me.cpp is doing a memcpy based on the kMEIUpdateGUID size (i know that kMEIUpdateGUID is a constant and cant be modified, but in any case there should be replaced with this line) https://github.com/facebook/osquery/blob/8f7ea728d269b6a1096b39cb5b05573b72e7190e/osquery/tables/system/linux/intel_me.cpp#L31 future possible vuln: memcpy(buffer, kMEIUpdateGUID.data(), kMEIUpdateGUID.size()); fix: memcpy(buffer, kMEIUpdateGUID.data(), std::min(sizeof(buffer), kMEIUpdateGUID.size()));