A SOC analyst reviews an endpoint after a legacy line-of-business application repeatedly crashed. Debug logs show the application received a 4,200-byte input into a fixed 256-byte field, after which the instruction pointer was overwritten and unexpected shellcode executed with the application's privileges. Which type of attack does this behavior most likely indicate?