CWE-170

Improper Null Termination

BaseIncompleteLikelihood: Medium

Description

The product does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.

Null termination errors frequently occur in two different ways. An off-by-one error could cause a null to be written out of bounds, leading to an overflow. Or, a program could use a strncpy() function call incorrectly, which prevents a null terminator from being added at all. Other scenarios are possible.

Hierarchy (View 1000)

Parents

CWE-707

Children

none

CVEs mapped to this weakness (52)

page 1 of 3

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-22931	Node.js Node.js	Cri	0.65	9.8	0.22	Aug 16, 2021	Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain…
CVE-2026-8721	Perl Foundation Crypt::OpenSSL::PKCS12	Cri	0.64	9.8	0.00	May 17, 2026	Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in PKCS12.xs are declared char *, which routes through Perl's default typemap to SvPV_nolen. The Perl length is discarded. The C code (or OpenSSL internally)…
CVE-2021-31886	Siemens Foundation Nucleus Net	Cri	0.64	9.8	0.03	Nov 9, 2021	A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE…
CVE-2021-31884	Siemens Foundation Nucleus Net	Cri	0.64	9.8	0.01	Nov 9, 2021	A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE…
CVE-2021-1418	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01	Mar 24, 2021	Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1417	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01	Mar 24, 2021	Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1411	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01	Mar 24, 2021	Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1471	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01	Mar 24, 2021	Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1469	Cisco Systems, Inc. Jabber	Cri	0.64	9.9	0.01	Mar 24, 2021	Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2019-8275	Ultravnc Ultravnc	Cri	0.64	9.8	0.04	Mar 8, 2019	UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision…
CVE-2026-55738	Rxi microtar	Hig	0.57	8.8	0.00	Jun 17, 2026	A stack-based buffer overflow exists in the raw_to_header function in src/microtar.c in rxi microtar 0.1.0. The function copies the 100-byte name and linkname fields of a TAR header with strcpy without guaranteeing null termination of the source.
CVE-2026-5067	Zephyrproject Rtos Zephyr	Cri	0.57	9.8	0.01	Jun 9, 2026	A remote, unauthenticated attacker can trigger memory corruption in Zephyr's HTTP server WebSocket upgrade path by sending a crafted Sec-WebSocket-Key header. The HTTP/1 header parser copies the header into a fixed-size buffer using a bounded copy that does not guarantee NUL…
CVE-2021-31888	Siemens Foundation Nucleus Net	Hig	0.57	8.8	0.02	Nov 9, 2021	A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE…
CVE-2021-31887	Siemens Foundation Nucleus Net	Hig	0.57	8.8	0.02	Nov 9, 2021	A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE…
CVE-2025-67733	Mlflow Valkey	Hig	0.55	8.5	0.01	Feb 23, 2026	Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for the given client, potentially corrupting or returning tampered data to other…
CVE-2024-45288	FreeBSD libnv	Hig	0.55	8.4	0.00	Sep 5, 2024	A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer.
CVE-2024-31484	Siemens Foundation CPCI85 Central Processing/Communication	Hig	0.51	7.8	0.00	May 14, 2024	A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communication (All versions < V5.30), CPCX26 Central Processing/Communication (All versions < V06.02), ETA4 Ethernet Interface IEC60870-5-104 (All…
CVE-2024-21442	Microsoft Windows USB Print Driver	Hig	0.51	7.8	0.01	Mar 12, 2024	Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2026-34464	Sandboxie Plus Sandboxie	Hig	0.50	8.8	0.00	May 5, 2026	Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, NamedPipeServer::OpenHandler copies the server field from NAMED_PIPE_OPEN_REQ into a fixed WCHAR pipename[160] stack buffer using wcscat without verifying null…
CVE-2024-43474	Microsoft SQL Server	Hig	0.50	7.6	0.01	Sep 10, 2024	Microsoft SQL Server Information Disclosure Vulnerability

CVE-2021-22931CriAug 16, 2021
Node.js
Node.js
risk 0.65cvss 9.8epss 0.22
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain…
CVE-2026-8721CriMay 17, 2026
Perl Foundation
Crypt::OpenSSL::PKCS12
risk 0.64cvss 9.8epss 0.00
Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in PKCS12.xs are declared char *, which routes through Perl's default typemap to SvPV_nolen. The Perl length is discarded. The C code (or OpenSSL internally)…
CVE-2021-31886CriNov 9, 2021
Siemens Foundation
Nucleus Net
risk 0.64cvss 9.8epss 0.03
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE…
CVE-2021-31884CriNov 9, 2021
Siemens Foundation
Nucleus Net
risk 0.64cvss 9.8epss 0.01
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE…
CVE-2021-1418CriMar 24, 2021
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1417CriMar 24, 2021
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1411CriMar 24, 2021
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1471CriMar 24, 2021
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2021-1469CriMar 24, 2021
Cisco Systems, Inc.
Jabber
risk 0.64cvss 9.9epss 0.01
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept…
CVE-2019-8275CriMar 8, 2019
Ultravnc
Ultravnc
risk 0.64cvss 9.8epss 0.04
UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision…
CVE-2026-55738HigJun 17, 2026
Rxi
microtar
risk 0.57cvss 8.8epss 0.00
A stack-based buffer overflow exists in the raw_to_header function in src/microtar.c in rxi microtar 0.1.0. The function copies the 100-byte name and linkname fields of a TAR header with strcpy without guaranteeing null termination of the source.
CVE-2026-5067CriJun 9, 2026
Zephyrproject Rtos
Zephyr
risk 0.57cvss 9.8epss 0.01
A remote, unauthenticated attacker can trigger memory corruption in Zephyr's HTTP server WebSocket upgrade path by sending a crafted Sec-WebSocket-Key header. The HTTP/1 header parser copies the header into a fixed-size buffer using a bounded copy that does not guarantee NUL…
CVE-2021-31888HigNov 9, 2021
Siemens Foundation
Nucleus Net
risk 0.57cvss 8.8epss 0.02
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE…
CVE-2021-31887HigNov 9, 2021
Siemens Foundation
Nucleus Net
risk 0.57cvss 8.8epss 0.02
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE…
CVE-2025-67733HigFeb 23, 2026
Mlflow
Valkey
risk 0.55cvss 8.5epss 0.01
Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for the given client, potentially corrupting or returning tampered data to other…
CVE-2024-45288HigSep 5, 2024
FreeBSD
libnv
risk 0.55cvss 8.4epss 0.00
A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer.
CVE-2024-31484HigMay 14, 2024
Siemens Foundation
CPCI85 Central Processing/Communication
risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communication (All versions < V5.30), CPCX26 Central Processing/Communication (All versions < V06.02), ETA4 Ethernet Interface IEC60870-5-104 (All…
CVE-2024-21442HigMar 12, 2024
Microsoft
Windows USB Print Driver
risk 0.51cvss 7.8epss 0.01
Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2026-34464HigMay 5, 2026
Sandboxie Plus
Sandboxie
risk 0.50cvss 8.8epss 0.00
Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, NamedPipeServer::OpenHandler copies the server field from NAMED_PIPE_OPEN_REQ into a fixed WCHAR pipename[160] stack buffer using wcscat without verifying null…
CVE-2024-43474HigSep 10, 2024
Microsoft
SQL Server
risk 0.50cvss 7.6epss 0.01
Microsoft SQL Server Information Disclosure Vulnerability