Weaknesses of type CWE-158
26 resultsCVE-2026-43861LOWmutt before 2.3.2 does not check for '\0' in url_pct_decode.EPSS 0.2%CVE-2026-43859LOWmutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest.EPSS 0.2%CVE-2026-41256MEDIUMjq: Embedded NUL truncates top-level jq programs loaded with -fEPSS 0.2%CVE-2026-43895MEDIUMjq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifactsEPSS 0.2%CVE-2025-61985LOWssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.EPSS 0.1%CVE-2026-28540MEDIUMOut-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiEPSS 0.1%