A penetration tester submits an oversized input string to a legacy C-based network daemon running on a company server. The application crashes, and the tester is subsequently able to execute arbitrary code by overwriting the return address on the stack with a pointer to injected shellcode. Which vulnerability class does this describe?