CWE-172Encoding Error

Abstraction: Class · CVEs in our corpus: 17

The product does not properly encode or decode the data, resulting in unexpected values.

Last updated: 20 August 2026 13:14 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 11 mapping(s) from 2 framework(s): CAPEC 10 (partial) · ATT&CK 1 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SI-10 Information Input Validation
SI-15 Information Output Filtering

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

MITRE ATT&CK techniques this weakness enables

Our own two-way CWE↔ATT&CK cross-walk — a direct mapping with no public source (the CWE→CAPEC→ATT&CK chain leaves most top weaknesses, incl. XSS and SQLi, mapped to nothing).

Direction: ← other covers this; → this covers other (F/M/P = full / mostly / partial). gov = governs / implements (a mandate, not coverage).

T1027 Obfuscated Files or Information←P →P

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2019-10160`	7.9	9.8	0.0523	2019-06-07
`CVE-2016-6691`	7.6	9.8	0.0130	2016-10-10
`CVE-2018-3777`	7.6	9.8	0.0151	2018-08-03
`CVE-2025-27110`	5.9	7.5	0.0047	2025-02-25
`CVE-2025-12758`	5.9	7.5	0.0051	2025-11-27
`CVE-2019-12677`	5.4	6.5	0.0153	2019-10-02
`CVE-2016-3827`	4.5	5.5	0.0057	2016-08-05
`CVE-2016-3828`	4.5	5.5	0.0057	2016-08-05
`CVE-2016-3829`	4.5	5.5	0.0068	2016-08-05
`CVE-2018-7173`	4.5	5.5	0.0078	2018-02-15
`CVE-2026-42926`	4.5	5.8	0.0035	2026-05-13
`CVE-2026-48784`	4.5	6.1	0.0027	2026-07-14
`CVE-2019-10153`	4.4	5.0	0.0217	2019-07-30
`CVE-2018-2415`	4.0	4.7	0.0117	2018-05-09
`CVE-2018-7289`	3.4	3.3	0.0172	2018-02-21
`CVE-2021-33604`	2.4	2.5	0.0029	2021-06-24
`CVE-2024-48909`	2.0	2.0	0.0030	2024-10-14