CWE-193: Off-by-one Error
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
Also known as off-by-five.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 morescsi: qla2xxx: Fix off by one in qla_edif_app_getstats()5.5 Medium
- linux, linux kernel +1 moreirqchip/gic-v3-its: Fix potential VPE leak on error5.5 Medium
- linux, linux kernel +1 moreof: fdt: fix off-by-one error in unflatten_dt_nodes()7.8 High
- linux, linux kernel +1 moreusb: typec: tcpm: Correct the PDO counting in pd_set7.8 High
- ffmpeg, fedoraproject fedora +1 moreFFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in...5.3 Medium
- debian linux, linux kernel +1 moreIB/hfi1: Fix sdma.h tx->num_descs off-by-one error7.8 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreLibvirt: off-by-one error in udevlistinterfacesbystatus()5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Fix off by one in hdmi_14_process_transaction()7.8 High
- linux kernelIn rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off...5.5 Medium
- vyperlang vyperVyper has incorrect storage layout for contracts containing large arrays7.5 High
- gimpGIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability7.8 High
- memcachedIn Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy...9.8 Critical
- zephyrproject zephyrPotential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem6.3 Medium
- zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver7.1 High
- bytecodealliance wasmtimeMiscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_642.2 Low
- libsndfile project libsndfileAn off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a...7.8 High
- linux kernelAn issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an...9.8 Critical
- apache tomcat, debian linux, netapp 7-mode transition tool +2 moreApache Tomcat: Fix for CVE-2023-24998 is incomplete7.5 High
- contiki-ngContiki-NG has off-by-one error in Antelope DBMS9.8 Critical
- redis redis-pyredis-py Race Condition vulnerability3.7 Low
- bytecodealliance wasmtime, cranelift-codegen +1 morewasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_643.1 Low
- gpac, gpac gpac/gpac +1 moreOff-by-one Error in gpac/gpac7.1 High
- nvidia gpu display driver, cloud gaming, vgpu software (guest driver) - linux, vgpu software (virtual gpu manager), nvidia cloud gaming (guest driver), nvidia cloud gaming (virtual gpu manager) +1 more +3 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an off-by-one error may lead to data tampering or information disclosure.5.3 Medium
- academysoftwarefoundation openimageio, debian linux +1 moreA heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master...5.3 Medium
- drachtio drachtio-serverAn issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows...7.5 High
- heimdal, debian linux +1 moreRead one byte past a buffer when normalizing Unicode5.9 Medium
- systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 moreAn off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c....5.5 Medium
- qemuAn off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading...8.6 High
- gnu libtasn1, debian linux, fedoraproject fedora +3 more +5 moreGNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects...9.1 Critical
- lora-net loramac-nodeBuffer Overflow in `ProcessRadioRxDone` in LoRaMac-node7.5 High
- linux, linux kernel +1 moreoff-by-one in io_uring module.7.8 High
- radare radare2An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c....7.5 High
- crowcpp crowCrow before v1.0+4 was discovered to contain a buffer overflow via the function qs_parse at...9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Kernel Denial of Service Vulnerability5.5 Medium
- accusoft imagegearA stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter...7.1 High
- accusoft imagegearA heap-based buffer overflow vulnerability exists in the Palette box parser functionality of...9.8 Critical
- rtl 433 project 433An Off-by-one Error occurs in cmr113_decode of rtl_433 21.12 when decoding a crafted file.5.5 Medium
- v2fly v2fly/v2ray-core, v2ray-core +1 moreOff-by-one Error in v2fly/v2ray-core5.9 Medium
- galois 2p8 project 2p8Buffer Overflow in galois_2p89.8 Critical
- gnu glibc, debian linux, netapp e-series performance analyzer +10 more +12 moreA flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to...7.8 High
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization...5.5 Medium
- qemu, debian linux, redhat codeready linux builder +7 more +9 moreAn off-by-one error was found in the SCSI device emulation in QEMU. It could occur while...6.5 Medium
- f5 nginx, fedoraproject fedora, netapp ontap select deploy administration utility +10 more +12 moreA security issue in nginx resolver was identified, which might allow an attacker who is able to...7.7 High
- google tensorflowHeap buffer overflow caused by rounding2.5 Low
- cesanta mongooseos mjsIn mjs_json.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can trigger an off...9.8 Critical
- siemens apogee pxc compact (bacnet), apogee pxc compact (p2 ethernet), apogee pxc modular (bacnet) +9 more +11 moreA vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All...6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by...6.0 Medium
- sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 moreSudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ...7.8 High
- xenAn issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial...8.8 High
- simple-slab project simple-slabOff-by-one error in simple-slab7.5 High
- Show moreLoading…