CWE-626

Null Byte Interaction Error (Poison Null Byte)

Medium

Description

The product does not properly handle null bytes or NUL characters when passing data between different representations or components.

Potential Impact

Integrity: Unexpected State

How to Fix

Implementation

Remove null bytes from all incoming strings.

Detection Methods

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-626 vulnerabilities in your codebase.

Get Security Assessment