Improper string-length checking can result in a buffer overflow situation that can be exploited by a malicious user The SVFMT_STRBAD_SCAN_FORMAT checker finds instances of omitted width specification (%s) in a format string