The product does not correctly calculate the length of strings that can contain wide or multi-byte characters.
Always verify the length of the string unit character.
Use length computing functions (e.g. strlen, wcslen, etc.) appropriately with their equivalent type (e.g.: byte, wchar_t, etc.)
Our security experts can help you identify and remediate CWE-135 vulnerabilities in your codebase.
Get Security Assessment