CWE-193: Off-by-one Error
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
Also known as off-by-five.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- signalwire freeswitch FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsing 5.3 Medium
- signalwire freeswitch FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequences 5.9 Medium
- postgresql psqlodbc psqlODBC ODBC escape parser stack buffer overflow 7.5 High
- libyal libpff libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_6c_record_entries 6.9 Medium
- vllm vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS) 6.5 Medium
- pbuchbinder mod qos Mod_qos: query truncation during json body merging permits security-rule bypass 5.3 Medium
- ibm mq advanced container images, mq operator, supplied mq advanced container images +2 more IBM MQ Buffer Overflow 4.3 Medium
- selmf unarr unarr through 1.1.1 Off-by-One Heap Buffer Overflow via tar_get_name 6.9 Medium
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 more Microsoft Office Word Remote Code Execution Vulnerability 8.8 High
- freebsd Remote DoS via receive-side kernel TLS 6.5 Medium
- michael r sweet mini-xml Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write via mxml_strtod() 2.0 Low
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +5 more +7 more Microsoft Office Excel Remote Code Execution Vulnerability 8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 more Microsoft Office Visio Remote Code Execution Vulnerability 8.8 High
- corazawaf coraza OWASP Coraza WAF: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass 5.8 Medium
- wolfssh wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms 5.3 Medium
- openbsd openssh In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because... 2.5 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 more Sssd: sssd: access control bypass via improper ldap shadow expiration check 5.4 Medium
- eclipse foundation threadx netx duo DHCP client option walk drifts one byte per skipped option, reading past the received message and past the saved options buffer 5.3 Medium
- trusted domain project opendmarc Trusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-one 6.9 Medium
- trusted domain project opendkim Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one 6.9 Medium
- rti connext professional Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. 6.9 Medium
- netdata Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent 6.5 Medium
-
libimager-perlDebian,perl-ImagerMageia +1 more Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p 5.5 Medium - xerial snappy-java snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methods 6.9 Medium
- zitadel ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions 5.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +12 more +14 more Microsoft Excel Remote Code Execution Vulnerability 7.8 High
- microsoft office 365 for mac, office for android, office ltsc for mac 2021 +14 more +16 more Win32k Information Disclosure Vulnerability 5.5 Medium
- d-link dir-605 D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one 9.2 Critical
- teluu pjsip, pjsip pjproject +1 more PJSIP: SIP message header buffer overflow 6.9 Medium
- ibm i IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ] 5.3 Medium
- openvpn OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger... 2.3 Low
- themoos core-moos MOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in Serial Telegram Handling 5.2 Medium
- zephyrproject zephyr Off-by-one out-of-bounds NUL write in Zephyr LwM2M JSON string parser 5.4 Medium
- google chrome Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... 9.1 Critical
- hashcat hashcat through 7.1.2 Off-by-One Out-of-Bounds Heap Write in fgetl() 6.9 Medium
- apache tomcat Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control 7.5 High
- alsa project alsa-lib alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse() 4.8 Medium
- nimiq core-rs-albatross Nimiq: Validity store off by one error 7.5 High
- microsoft word, 365 apps, 365 apps for enterprise +6 more +8 more Microsoft Office Word Information Disclosure Vulnerability 5.5 Medium
- gnu emacs Off-by-One Error in GNU Emacs for Android 5.3 Medium
- libevent Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response 7.0 High
- mozilla thunderbird Off-by-one out of bounds read in MIME header parser for forwarding 7.5 High
- nlnet labs unbound Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN 3.7 Low
- linux, linux kernel +1 more net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring 9.8 Critical
- tuxera ntfs-3g CVE-2026-42618 affecting package ntfs-3g for versions less than 2022.10.3-5 7.1 High
- imagemagick ImageMagick before 7.1.2-26 Information Disclosure via identify 2.1 Low
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 more Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability 6.5 Medium
- freerdp FreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragments 5.4 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 more Gimp: gimp: stack buffer overflow in pnmscanner_gettoken() 7.3 High
- openvpn OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by... 7.0 High
- Show olderLoading…