CWE-172 - Encoding Error
- Abstraction:Class
- Structure:Simple
- Status:Draft
- Release Date:2006-07-19
- Latest Modification Date:2023-10-26
Weakness Name
Encoding Error
Description
The product does not properly encode or decode the data, resulting in unexpected values.
Common Consequences
Scope: Integrity
Impact: Unexpected State
Related Weaknesses
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')High
Retail giant Sam’s Club investigates Clop ransomware breach claims
Phishing-as-a-service operation uses DNS-over-HTTPS for evasion
New Ubuntu Linux security bypasses require manual mitigations
Oracle Health breach compromises patient data at US hospitals
Researchers Uncover 46 Critical Flaws in Solar Inverters From Sungrow, Growatt, and SMA
CoffeeLoader Uses GPU-Based Armoury Packer to Evade EDR and Antivirus Detection
Microsoft fixes Remote Desktop issues caused by Windows updates
Critical Firefox, Tor Browser sandbox escape flaw fixed (CVE-2025-2857)
Product Walkthrough: How Datto BCDR Delivers Unstoppable Business Continuity
CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability
CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability
CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
CVE-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
CVE-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability
CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
CVE-2024-41710 Mitel SIP Phones Argument Injection Vulnerability
CVE-2024-29059 Microsoft .NET Framework Information Disclosure Vulnerability
InformationalInformation Disclosure - Suspicious Comments
InformationalRe-examine Cache-control Directives