What is the potential risk associated with this code?

#include

int main$($int argc, char$**$ argv$)\{$

char buffer$[100]$;

printf$($buffer$)$;

$\}$

What is the potential risk associated with this code?

#include

int main$($int argc, char$**$ argv$)\{$

char buffer$[100]$;

printf$($buffer$)$;

$\}$

SQL injection

Buffer overflow

Format string vulnerbility

Cross$-$site scripting