CVE-2026-44041

UltraVNC through 1.8.2.2 contains an out-of-bounds read in the wide-string to multibyte conversion helper. In rfb/dh.cpp:204, the vncWc2Mb function passes a caller-supplied WCHAR pointer to wcslen before any bounds check. If the caller provides a wide-character buffer that is not properly...

CVE-2026-44041 UltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminated

UltraVNC through 1.8.2.2 contains an out-of-bounds read in the wide-string to multibyte conversion helper. In rfb/dh.cpp:204, the vncWc2Mb function passes a caller-supplied WCHAR pointer to wcslen before any bounds check. If the caller provides a wide-character buffer that is not properly...

EUVD-2026-40878

UltraVNC through 1.8.2.2 contains an out-of-bounds read in the wide-string to multibyte conversion helper. In rfb/dh.cpp:204, the vncWc2Mb function passes a caller-supplied WCHAR pointer to wcslen before any bounds check. If the caller provides a wide-character buffer that is not properly...

CVE-2026-44041

UltraVNC

DEBIAN-CVE-2022-30976

GPAC 2.0.0 misuses a certain Unicode utf8wcslen renamed gfutf8wcslen function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box...

PT-2022-20433

Name of the Vulnerable Software and Affected Versions GPAC version 2.0.0 Description The issue is related to the misuse of a certain Unicode function, specifically utf8 wcslen renamed gf utf8 wcslen, in the utils/utf.c file. This results in a heap-based buffer over-read, which can be demonstrated...

DEBIAN-CVE-2022-24577

GPAC 1.0.1 is affected by a NULL pointer dereference in gfutf8wcslen. gfutf8wcslen is a renamed Unicode utf8wcslen function...

PT-2022-16731 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to a NULL pointer dereference in the gf utf8 wcslen function, which is a renamed Unicode utf8 wcslen function. Recommendations: For GPAC version 1.0.1, at the moment, there is no informatio...

CVE-2019-20829

An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYSwcslen in an Epub file...

PT-2020-10793

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.6 Description An issue was discovered that leads to a NULL pointer dereference via FXSYS wcslen when processing an Epub file. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.6...

PT-2020-10788

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.11 Description An issue was discovered in Foxit PhantomPDF. It has a NULL pointer dereference via FXSYS wcslen in an Epub file. Recommendations For versions prior to 8.3.11, update to version 8.3.11 or...

Denial of Service Vulnerability in Configuration King 7.5sp2

KingView is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A denial of service vulnerability exists in KingView 7.5sp2. The vulnerability stems from the use of wcslen to read the length of a string when closing a file and failing to...