VYPR

CWE-170

Improper Null Termination

BaseIncompleteLikelihood: Medium

Description

The product does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.

Null termination errors frequently occur in two different ways. An off-by-one error could cause a null to be written out of bounds, leading to an overflow. Or, a program could use a strncpy() function call incorrectly, which prevents a null terminator from being added at all. Other scenarios are possible.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (52)

page 3 of 3
  • CVE-2019-11045LowDec 23, 2019
    risk 0.25cvss 3.7epss 0.09

    In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is…

  • CVE-2019-11044LowDec 23, 2019
    risk 0.24cvss 3.7epss 0.05

    In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 on Windows, PHP link() function accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is…

  • CVE-2026-32837MedMar 17, 2026
    risk 0.19cvss 4.0epss 0.00

    miniaudio version 0.11.25 and earlier (fixed in commits 1df46ae and 1df46ae) contain a heap out-of-bounds read vulnerability in the WAV BEXT metadata parser that allows attackers to trigger memory access violations by processing crafted WAV files. Attackers can exploit improper…

  • CVE-2026-23749LowFeb 26, 2026
    risk 0.19cvss 2.9epss 0.00

    Golioth Firmware SDK version 0.19.1 prior to 0.22.0, fixed in commit 0e788217, contain an out-of-bounds read due to improper null termination of a blockwise transfer path. blockwise_transfer_init() accepts a path whose length equals CONFIG_GOLIOTH_COAP_MAX_PATH_LEN and copies…

  • CVE-2026-2239LowMar 26, 2026
    risk 0.18cvss 2.8epss 0.00

    A flaw was found in GIMP. Heap-buffer-overflow vulnerability exists in the fread_pascal_string function when processing a specially crafted PSD (Photoshop Document) file. This occurs because the buffer allocated for a Pascal string is not properly null-terminated, leading to an…

  • CVE-2026-40334LowApr 18, 2026
    risk 0.16cvss 3.5epss 0.00

    libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, a missing null terminator exists in ptp_unpack_Canon_FE() in camlibs/ptp2/ptp-pack.c (line 1377). The function copies a filename into a 13-byte buffer using strncpy without explicitly…

  • CVE-2026-12386LowJul 5, 2026
    risk 0.00cvss 3.9epss 0.00

    Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers. This issue affects Pardus Pen: from <=4.1.5 before 4.2.1.

  • CVE-2026-27692HigFeb 25, 2026
    risk 0.00cvss 7.1epss 0.00

    iccDEV provides a set of libraries and tools for working with ICC color management profiles. In versions up to and including 2.3.1.4, heap-buffer-overflow read occurs during CIccTagTextDescription::Release() when strlen() reads past a heap buffer while parsing ICC profile XML…

  • CVE-2026-24852MedJan 28, 2026
    risk 0.00cvss 6.1epss 0.00

    iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, a heap buffer over-read when the strlen() function attempts to read a non-null-terminated buffer potentially…

  • CVE-2026-21488MedJan 6, 2026
    risk 0.00cvss 6.1epss 0.00

    iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Out-of-bounds Read, Heap-based Buffer Overflow and Improper Null Termination through its CIccTagText::Read function. This issue is fixed in…

  • CVE-2023-24021HigJan 20, 2023
    risk 0.00cvss 7.5epss 0.01

    Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection.

  • CVE-2022-47515HigDec 18, 2022
    risk 0.00cvss 7.5epss 0.01

    An issue was discovered in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a long message in a TCP request that leads to std::length_error.