CWE-193: Off-by-one Error
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
Also known as off-by-five.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- xlnt-community xlntxlnt-community xlnt Encrypted XLSX File base64.cpp decode_base64 off-by-one4.8 Medium
- bacnet-stack, bacnetstack bacnet stack +1 moreThe BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_string5.5 Medium
ml-dsacrates.ioml-dsa's UseHint function has off by two error when r0 equals zero5.5 Medium- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moredm-verity: disable recursive forward error correction7.5 High
- sumatrapdfreader sumatrapdfSumatraPDF's Integer Underflow in PalmDbReader Leads to Crash5.5 Medium
- linux, linux kernel +1 moreiavf: fix off-by-one issues in iavf_config_rss_reg()5.5 Medium
- color iccdevHeap Buffer Overflow in iccDEV ToneMap Parser6.6 Medium
- color iccdeviccDEV has unicode buffer overflow in CIccTagTextDescription6.1 Medium
- color iccdeviccDEV has heap buffer overflow in CIccTagLut16::Validate()6.1 Medium
- color iccdeviccDEV has heap buffer overflow in CIccTagLut8::Validate()6.1 Medium
- google chromeOff by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to...4.3 Medium
- linux, linux kernel +1 moreext4: fix off-by-one errors in fast-commit block filling5.5 Medium
- rti connext professionalBuffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers.4.8 Medium
- linux, linux kernel +1 morewifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()8.8 High
- es iperf3In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer...6.5 Medium
- imagemagickImageMagick has Heap Buffer Overflow in InterpretImageFilename3.7 Low
- arm mbed tls, mbed mbedtls +1 moreMbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in...4.8 Medium
- nbdkit project nbdkit, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreNbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service6.5 Medium
- linux, linux kernel +1 moreext4: fix another off-by-one fsmap error on 1k block filesystems5.5 Medium
- debian linux, linux kernel +1 moreext4: fix off-by-one error in do_split7.8 High
- gobgpGoBGP does not verify that the input length6.8 Medium
- gobgpGoBGP panics due to a zero value for softwareVersionLen8.6 High
- linux, linux kernel +1 moreLoongArch: BPF: Fix off-by-one error in build_prologue()7.8 High
- pizhenwei atophttpdhttpd.c in atophttpd 2.8.0 has an off-by-one error and resultant out-of-bounds read because a...5.3 Medium
- syncology replication service, synology unified controller (dsmuc), unified controller +2 moreOff-by-one error vulnerability in the transmission component in Synology Replication Service...10.0 Critical
- linux, linux kernel +1 moretimers/migration: Fix off-by-one root mis-connection5.5 Medium
- linux, linux kernel +1 morewifi: mt76: mt7925: fix off by one in mt7925_load_clc()7.8 High
- linux, linux kernel +1 moremmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)5.5 Medium
- denx u-bootsqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap...7.1 High
- blackberry qnx software development platform, qnx software development platform (sdp) +1 moreVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform5.3 Medium
- linux, linux kernel +1 morebpf, sockmap: Several fixes to bpf_msg_pop_data7.8 High
- linux, linux kernel +1 morewifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one7.8 High
- linux, linux kernel +1 morecrypto: qat/qat_420xx - fix off by one in uof_get_name()5.5 Medium
- linux, linux kernel +1 moreusb: typec: ucsi: glink: fix off-by-one in connector_status4.6 Medium
- abb matrix series, nexus series, aspect-ent-12 firmware +19 more +21 moreoff-by-one-error8.8 High
- linux, linux kernel +1 moremodpost: fix off by one in is_executable_section()5.5 Medium
- linux, linux kernel +1 moreext4: fix off by one issue in alloc_flex_gd()7.8 High
- linux, linux kernel +1 morepowercap: intel_rapl: Fix off by one in get_rpi()7.1 High
- linux, linux kernel +1 moreep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()7.1 High
- linux, linux kernel +1 morescsi: sd: Fix off-by-one error in sd_read_block_characteristics()8.6 High
- oisf suricataSuricata defrag: off by one can lead to policy bypass5.3 Medium
- debian linux, linux kernel +1 moredma-buf: heaps: Fix off-by-one in CMA heap fault handler7.8 High
- linux, linux kernel +1 moredrm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()5.5 Medium
- freebsdbhyve(8) privileged guest escape via USB controller8.2 High
- linux, linux kernel +1 morehwmon: (ltc2991) re-order conditions to fix off by one bug7.8 High
- ivanti avalancheAn off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote...7.5 High
- linux, linux kernel +1 moredrm/nouveau: fix off by one in BIOS boundary checking7.8 High
- netatalkNetatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of...9.8 Critical
- netatalkNetatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of...7.5 High
- debian linux, linux kernel +1 moreocteontx2-af: avoid off-by-one read from userspace5.5 Medium
- Show moreLoading…