CWE-170Base

Improper Null Termination

Incomplete in the CWE catalog · 61 CVEs mapped

61
CVEs mapped
6.5
Median CVSS
What it is

The product does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.

Recent examples
3.7cvss
CVE-2026-114457

Mod_qos: missing nul termination in json value escaping permits out-of-bounds reads

A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS) by sending a specially crafted JSON request when JSON body filtering is enabled. Due to improper string termination during the processing of percent-encoded input, the module reads past allocated memory boundaries, which can cause an Apache worker process to crash.

LOWno explanation yet
—
epss
5.5cvss
CVE-2026-96860

CVE-2026-96860 - MEDIUM Severity Vulnerability

Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.

MEDIUMno explanation yet
0%
epss
5.5cvss
CVE-2026-96850

CVE-2026-96850 - MEDIUM Severity Vulnerability

Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.

MEDIUMno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-170
Abstraction
Base
Structure
Simple
Status
Incomplete