CWE-135
Incorrect Calculation of Multi-Byte String Length
The product does not correctly calculate the length of strings that can contain wide or multi-byte characters.
Impactr finds and proves whether CWE-135 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.