Which of the following is the most common vulnerability that can affect desktop applications written in native code?

Spyware is a category of malware that covertly collects user data - it is a threat tool delivered by attackers, not a coding vulnerability inherent to how native code applications are written.

A DDoS attack is a network-based availability attack that overwhelms services with traffic and is not a programming vulnerability specific to desktop applications written in native code.

Malware is a broad term for malicious software and represents an external threat, not a vulnerability class that emerges from the coding practices of native code application development.

A buffer overflow occurs when a program writes more data to a fixed-size memory buffer than it can hold, causing adjacent memory to be overwritten and potentially allowing an attacker to execute arbitrary code. This vulnerability is endemic to native code languages like C and C++ that perform no automatic boundary enforcement, making it the most historically common and critical flaw in such applications.