CWE-170: Improper Null Termination
The product does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- irontec sngrep Irontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packet 6.3 Medium
- asterisk, asterisk certified-asterisk +1 more Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser 6.5 Medium
- pbuchbinder mod qos Mod_qos: missing nul termination in json value escaping permits out-of-bounds reads 3.7 Low
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 more Windows Modern Device Management (MDM) Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +10 more +12 more Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows USB Print Driver Information Disclosure Vulnerability 5.5 Medium
- radare radare2 radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser 3.3 Low
- videolan vlc media player VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability 5.3 Medium
- microsoft word, 365 apps, 365 apps for enterprise +10 more +12 more Microsoft Office Word Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Windows Remote Desktop Protocol Information Disclosure Vulnerability 7.5 High
- wazuh Wazuh: Pre-auth stack-buffer-overflow in compare_wazuh_versions reachable from wazuh-authd (TCP/1515) via crafted enrollment V: field 7.5 High
- linux dma-fence: Make dma_fence_dedup_array() robust against 0-count input 7.8 High
- linux, linux kernel +1 more RDMA/core: Prefer NLA_NUL_STRING 8.4 High
- h2o h2o is vulnerable to heap overrun 5.9 Medium
- tubitak bilgem software technologies research institute pardus pen Buffer Overflow in TUBITAK BILGEM's Pardus Pen 3.9 Low
- rxi microtar Stack Buffer Overflow in rxi/microtar raw_to_header() via non-null-terminated TAR name field 8.7 High
- zephyrproject zephyr Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key 9.8 Critical
- jonasbn crypt::openssl::pkcs12 Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs 9.8 Critical
- sandboxie-plus sandboxie Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server field 8.8 High
- sandboxie-plus sandboxie Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string copy 7.3 High
- apache http server Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string) 5.3 Medium
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 more Gnutls: gnutls: authentication bypass via nul character in username 7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more netfilter: x_tables: ensure names are nul-terminated 7.1 High
- gphoto libgphoto2 libgphoto2 missing null termination in ptp_unpack_Canon_FE() filename buffer in ptp-pack.c 3.5 Low
- jqlang jq jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input 2.9 Low
- mackron miniaudio mackron / miniaudio Out-of-Bounds Read in BEXT Coding History Parsing 5.1 Medium
- golioth firmware sdk Golioth Firmware SDK < 0.22.0 Blockwise Transfer Path Out-of-Bounds Read 2.1 Low
- color iccdev iccDEV has HBO in CIccTagTextDescription::Release() 7.1 High
- lfprojects valkey, red hat enterprise linux 10, enterprise linux 10.0 extended update support +1 more +3 more Valkey Affected by RESP Protocol Injection via Lua error_reply 8.5 High
- gimp, red hat enterprise linux 7, enterprise linux 8 +2 more +4 more Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow 2.8 Low
- color iccdev iccDEV has a heap-buffer-overflow in icXmlParseTextString() 6.1 Medium
- color iccdev iccDEV has Out-of-bounds Read, Heap-based Buffer Overflow and Improper Null Termination 6.1 Medium
- moxa nport 6100-g2/6200-g2 series The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026)... 7.1 High
- drivelock An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1... 7.5 High
- envoyproxy envoy Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte 5.0 Medium
- wazuh Wazuh vulnerable to Heap-based Buffer Over-read in w_expression_match 6.9 Medium
- python-ldap python-ldap Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination 5.5 Medium
- open networking foundation (onf) libfluid, opennetworking libfluid msg +1 more Improper Null Termination in libfluid_msg library 5.3 Medium
- microsoft sql server 2017 (cu 31), sql server 2017 (gdr), sql server 2019 (gdr) +2 more +4 more Microsoft SQL Server Information Disclosure Vulnerability 7.6 High
- freebsd Multiple vulnerabilities in libnv 8.4 High
- siemens cpc80 central processing/communication, cpci85 central processing/communication, cpcx26 central processing/communication +5 more +7 more A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16... 7.3 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 21h2 +11 more +13 more Windows USB Print Driver Elevation of Privilege Vulnerability 7.8 High
- dell cpg bios, latitude 5280 firmware, latitude 5288 firmware +171 more +173 more Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user... 6.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 more Windows Cryptographic Services Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 more Windows Cryptographic Services Information Disclosure Vulnerability 5.5 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 more Windows Deployment Services Denial of Service Vulnerability 6.5 Medium
- microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2022 version 17.0, visual studio 2022 version 17.2 +4 more +6 more Visual Studio Information Disclosure Vulnerability 5.5 Medium
- trustwave modsecurity, debian linux +1 more In ModSecurity before 2.9.7, FILES_TMP_CONTENT sometimes lacked the complete content. This can... 7.5 High
- drachtio drachtio-server An issue was discovered in drachtio-server before 0.8.20. It allows remote attackers to cause a... 7.5 High
- siemens apogee mbc (ppc) (bacnet), apogee mbc (ppc) (p2 ethernet), apogee mec (ppc) (bacnet) +42 more +44 more A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC)... 8.8 High
- Show olderLoading…