CWE-135 Incorrect Calculation of Multi-Byte String Length
baseThe product does not correctly calculate the length of strings that can contain wide or multi-byte characters.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (5)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-5330US | high7.5 | — | ||
ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to… | ||||
| CVE-2026-34831US | medium6.5 | — | ||
Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Files#fail sets the Content-Length response header using String#size instead of Stri… | ||||
| CVE-2025-48388US | medium6.5 | — | ||
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, the application performs insufficient validation of user-supplied data, which is used as arg… | ||||
| CVE-2026-26156US | — | — | ||
Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-0810US | — | — | ||
A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety i… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan