Common Weakness Enumeration

CWE-170 Improper Null Termination

Description

The product does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-170 ordered by modification date.

2 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-rwjg-c3h2-f57p CVE-2025-66220 MODERATE
golang/github.com/envoyproxy/envoy

Envoy's TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte

 2025-12-05
GHSA-p34h-wq7j-h5v6 CVE-2025-61912 MODERATE
pypi/python-ldap

python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination

 2025-10-13