Which of the following statements about buffer overflow is true?

Managing security credentials and public keys for message encryption describes a Public Key Infrastructure (PKI) or key management system, which is entirely unrelated to buffer overflow vulnerabilities.

A collection of files used by Microsoft for software updates released between major versions describes a service pack or cumulative update rollup, not a memory vulnerability condition.

A buffer overflow occurs when more data is written into a fixed-size memory buffer than it was allocated to hold, causing excess data to overwrite adjacent memory regions. Depending on what memory is overwritten, this can result in crashes, arbitrary code execution, or privilege escalation by an attacker.

A false warning about a virus describes a virus hoax or false positive alert generated by antivirus software, which has no relationship to the buffer overflow vulnerability category.