zero is a valid code point and the utf encoding of it is a nul byte an xc x sequence in a utf is an invalid overlong encoding in fact the overlong encoding of nul is used as an example of a security issue from an incorrect utf implementation in the rfc