CWE-170.

Irontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packet

• irontec sngrep
• CWE-170

Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser

• asterisk
• certified-asterisk
• CWE-126
• CWE-170

Mod_qos: missing nul termination in json value escaping permits out-of-bounds reads

• pbuchbinder mod_qos
• CWE-170

Windows Modern Device Management (MDM) Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Memory corruption
• CWE-170

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 24H2
• CWE-170

Windows USB Print Driver Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Memory corruption
• CWE-170

radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser

• radareorg radare2
• Memory corruption
• CWE-170

VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability

• VideoLAN VLC media player
• Memory corruption
• CWE-170

Microsoft Office Word Information Disclosure Vulnerability

• Microsoft 365 Apps for Enterprise
• Microsoft Office 2019
• CWE-170

Windows Remote Desktop Protocol Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-170

Wazuh: Pre-auth stack-buffer-overflow in compare_wazuh_versions reachable from wazuh-authd (TCP/1515) via crafted enrollment V: field

• wazuh
• Memory corruption
• CWE-170

dma-fence: Make dma_fence_dedup_array() robust against 0-count input

• Linux kernel
• CWE-170

RDMA/core: Prefer NLA_NUL_STRING

• Linux kernel
• CWE-170

h2o is vulnerable to heap overrun

• h2o
• Memory corruption
• CWE-170

Buffer Overflow in TUBITAK BILGEM's Pardus Pen

• TUBITAK BILGEM Software Technologies Research Institute Pardus Pen
• CWE-170

Stack Buffer Overflow in rxi/microtar raw_to_header() via non-null-terminated TAR name field

• rxi microtar
• Memory corruption
• CWE-170

Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key

• Zephyr
• Memory corruption
• CWE-170

Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs

• JONASBN Crypt::OpenSSL::PKCS12
• CWE-170

Gnutls: gnutls: authentication bypass via nul character in username

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-170
• CWE-626

Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server field

• Sandboxie
• Memory corruption
• CWE-170

Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string copy

• Sandboxie
• Memory corruption
• CWE-170

Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)

• Apache Software Foundation Apache HTTP Server
• Memory corruption
• CWE-170

netfilter: x_tables: ensure names are nul-terminated

• Linux kernel
• CWE-170

libgphoto2 missing null termination in ptp_unpack_Canon_FE() filename buffer in ptp-pack.c

• libgphoto2
• CWE-170

jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input

• jq
• CWE-20
• CWE-170

Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• CWE-170

mackron / miniaudio Out-of-Bounds Read in BEXT Coding History Parsing

• mackron miniaudio
• CWE-170

Golioth Firmware SDK < 0.22.0 Blockwise Transfer Path Out-of-Bounds Read

• Golioth Firmware SDK
• CWE-170

iccDEV has HBO in CIccTagTextDescription::Release()

• InternationalColorConsortium iccDEV
• Memory corruption
• CWE-170

Valkey Affected by RESP Protocol Injection via Lua error_reply

• valkey
• Other injection
• CWE-170

iccDEV has a heap-buffer-overflow in icXmlParseTextString()

• InternationalColorConsortium iccDEV
• Memory corruption
• CWE-170

iccDEV has Out-of-bounds Read, Heap-based Buffer Overflow and Improper Null Termination

• InternationalColorConsortium iccDEV
• Memory corruption
• CWE-170

Improper null termination in Moxa NPort 6100-G2/6200-G2 Series

• Moxa NPort 6100-G2/6200-G2 Series
• CWE-170

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.

• CWE-170

Envoy's TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte

• CWE-170

<1.33.13 || >=1.34.0, <1.34.11 || >=1.35.0, <1.35.7 || >=1.36.0, <1.36.3 · fixed in 1.33.13, 1.34.11, 1.35.7, 1.36.3

Wazuh vulnerable to Heap-based Buffer Over-read in w_expression_match

• wazuh
• CWE-126
• CWE-170

python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination

• CWE-116
• CWE-170

<3.4.5 · fixed in 3.4.5

Improper Null Termination in libfluid_msg library

• Open Networking Foundation (ONF) libfluid
• CWE-170

Microsoft SQL Server Information Disclosure Vulnerability

• Microsoft SQL Server 2017 (CU 31)
• Microsoft SQL Server 2017 (GDR)
• CWE-170

Multiple vulnerabilities in libnv

• FreeBSD
• Memory corruption
• CWE-170

Improper null termination in Siemens CPC80 Central Processing/Communication and others

• Siemens CPC80 Central Processing/Communication
• Siemens CPCI85 Central Processing/Communication
• CWE-170

Windows USB Print Driver Elevation of Privilege Vulnerability

• Microsoft Windows Server 2022
• Microsoft Windows 11 version 21H2
• CWE-170

Improper null termination in Dell CPG BIOS

• Dell CPG BIOS
• CWE-170

Windows Cryptographic Services Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-170

Windows Cryptographic Services Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-170

Windows Deployment Services Denial of Service Vulnerability

• Microsoft Windows Server 2019
• Microsoft Windows Server 2019 (Server Core installation)
• CWE-170

Visual Studio Information Disclosure Vulnerability

• Microsoft Visual Studio 2022 version 17.2
• Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
• CWE-170

Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules…

• CWE-170

An issue was discovered in drachtio-server before 0.8.20.

• CWE-170

Improper null termination in Siemens APOGEE MBC (PPC) (BACnet) and others

• Siemens APOGEE MBC (PPC) (BACnet)
• Siemens APOGEE MBC (PPC) (P2 Ethernet)
• CWE-170

Improper null termination in Siemens APOGEE MBC (PPC) (BACnet) and others

• Siemens APOGEE MBC (PPC) (BACnet)
• Siemens APOGEE MBC (PPC) (P2 Ethernet)
• CWE-170

Improper null termination in Siemens APOGEE MBC (PPC) (BACnet) and others

• Siemens APOGEE MBC (PPC) (BACnet)
• Siemens APOGEE MBC (PPC) (P2 Ethernet)
• CWE-170

Improper null termination in Siemens APOGEE MBC (PPC) (BACnet) and others

• Siemens APOGEE MBC (PPC) (BACnet)
• Siemens APOGEE MBC (PPC) (P2 Ethernet)
• CWE-170

Improper null termination in NVIDIA Virtual GPU Software

• NVIDIA Virtual GPU Software
• CWE-170

Improper null termination in Node

• Node
• CWE-170

Improper null termination in Siemens APOGEE PXC Compact (BACnet) and others

• Siemens APOGEE PXC Compact (BACnet)
• Siemens APOGEE PXC Compact (P2 Ethernet)
• CWE-170

Cisco Jabber Desktop and Mobile Client Software Vulnerabilities

• Cisco Jabber
• CWE-170

Cisco Jabber Desktop and Mobile Client Software Vulnerabilities

• Cisco Jabber
• CWE-170

Cisco Jabber Desktop and Mobile Client Software Vulnerabilities

• Cisco Jabber
• CWE-170

Cisco Jabber Desktop and Mobile Client Software Vulnerabilities

• Cisco Jabber
• CWE-170