Incorrect Calculation of Multi-Byte String Length
CWE-135
The product does not correctly calculate the length of strings that can contain wide or multi-byte characters.
We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 7.1.
How this weakness is prevented
- Implementation: Always verify the length of the string unit character.
- Implementation: Use length computing functions (e.g. strlen, wcslen, etc.) appropriately with their equivalent type (e.g.: byte, wchar_t, etc.)
Latest Incorrect Calculation of Multi-Byte String Length vulnerabilities
- 7.1 High severity
gitoxide: Incorrect Calculation
A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the `TimeBuf` component, leading to undefined behavior when these m