CWE-626 · 4 records
Null Byte Interaction Error (Poison Null Byte)
CVEs in this class
4 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2019-11936No exploit | Various APC functions accept keys containing null bytes as input, leading to premature truncation of input.facebook · hhvm · CWE-626 | Critical9.8 | — | 1.4% | Dec 4, 2019 |
38Monitor | CVE-2019-17137Proof of concept | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC1200 R6220 Firmware vernetgear · ac1200 r6220 firmware · CWE-626 | Critical9.4 | — | 2.7% | Feb 10, 2020 |
25Monitor | CVE-2026-62380No exploit | Netty before 4.2.16.Final SOCKS Proxy Null Byte Injectionnetty · netty · CWE-626 | Medium6.3 | — | 0.2% | Aug 22, 2026 |
17Monitor | CVE-2020-10773No exploit | A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incorrectly writes to thelinux · linux kernel · CWE-626 | Medium4.4 | — | 0.3% | Sep 10, 2020 |
- CVE-2019-1193639Monitor
Various APC functions accept keys containing null bytes as input, leading to premature truncation of input.
CriticalCVSS 9.8No exploitEPSS 1%facebook · hhvmDec 4, 2019
- CVE-2019-1713738Monitor
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC1200 R6220 Firmware ver
CriticalCVSS 9.4Proof of conceptEPSS 2%netgear · ac1200 r6220 firmwareFeb 10, 2020
- CVE-2026-6238025Monitor
Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection
MediumCVSS 6.3No exploitEPSS 0%netty · nettyAug 22, 2026
- CVE-2020-1077317Monitor
A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incorrectly writes to the
MediumCVSS 4.4No exploitEPSS 0%linux · linux kernelSep 10, 2020