CWE-135 · Incorrect Calculation of Multi-Byte String Length

2 CVEs classified under CWE-135 (Incorrect Calculation of Multi-Byte String Length). Browse by severity and year.

Top CVEs for CWE-135
CVESeverityScorePublishedSummary
CVE-2026-0810High7.12026-01-26A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates…
CVE-2026-34831Medium4.82026-04-02Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Files#fail sets the Content-Length response header using String…
All CVEs classified under CWE-135 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-34831Medium4.82026-04-02Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Files#fail sets the Content-Length response header using String…
CVE-2026-0810High7.12026-01-26A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates…