CWE-193: Off-by-one Error
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
Also known as off-by-five.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- libreswanIKEv2 Denial of Service via malformed fragmentation7.5 High
- uvnc ultravncUltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing7.5 High
- uvnc ultravncUltraVNC repeater wi_uudecode off-by-one in base64 decode boundary check3.7 Low
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +38 more +40 moreGlib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"7.3 High
- jouni malinen hostapdIn hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link...6.5 Medium
- linux, linux kernel +1 moreocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison9.8 Critical
- linux, linux kernel +1 moretty: hvc_iucv: fix off-by-one in number of supported devices5.5 Medium
- canboatCANBoat - Off-by-One Global Buffer Overflow in searchForPgn()7.0 High
- rtklibRTKLIB 2.4.3 - Off-by-One Out-of-Bounds Read in decode_ssr3 via RTCM3 SSR Message6.9 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 more6lowpan: fix off-by-one in multicast context address compression5.5 Medium
- linux, linux kernel +1 morenet: bcmgenet: fix off-by-one in bcmgenet_put_txcb9.8 Critical
- linux, linux kernel +1 morebpf, arm64: Fix off-by-one in check_imm signed range check7.8 High
- gogsGogs: Privilege Escalation via Collaboration Access Mode Validation5.5 Medium
- the document foundation libreoffice, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreHeap buffer overflow in Calc formula compilation5.4 Medium
- debevv nanomodbusnanoMODBUS Off-by-One Buffer Overflow in recv_msg_header() via Crafted MBAP Length Field7.8 High
- rikyoz bit7zbit7z: Path Traversal via Null Byte Injection from `gcount()` Off-by-One in `restoreSymlink()`3.6 Low
- linux, linux kernel +1 moremedia: rockchip: rkcif: fix off by one bugs7.8 High
- musicplayerdaemon mpdMusic Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24be8.8 High
- linux, linux kernel +1 moreceph: fix num_ops off-by-one when crypto allocation fails5.5 Medium
- pavel-odintsov fastnetmonFastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in...9.8 Critical
Magick.NET-Q16-AnyCPUNuGet,Magick.NET-Q16-arm64NuGet,Magick.NET-Q16-HDRI-AnyCPUNuGet +14 more +16 moreImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix6.2 Medium- netatalkOff-by-two in papd lp_write()3.7 Low
- rsyncproject rsyncRsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy2.1 Low
- imagemagickImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder4.0 Medium
- imagemagickImageMagick: Out-of-Bounds Read of a single byte in meta encoder5.3 Medium
- torproject torTor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE...3.7 Low
- rapid7 velociraptorVelociraptor EVTX Parser — Process Crash via Crafted .evtx File4.4 Medium
- postfix, red hat enterprise linux 10, enterprise linux 10.0 extended update support +10 more +12 morePostfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over...3.7 Low
- muttmutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest.3.7 Low
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +21 more +23 moreGnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling5.3 Medium
github.com/tinfoil-factory/netfoilGoNetfoil has incorrect allowlist enforcement6.9 Medium- bacnet-stack, bacnetstack bacnet stack +1 moreBACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder8.7 High
- freerdpFreeRDP: contains_dotdot() off-by-one allows drive channel path traversal via terminal ..4.2 Medium
- gnu emacs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreEmacs: emacs: memory corruption vulnerability when processing svg css6.1 Medium
- imagemagickImageMagick - Heap Buffer Overflow via Off-by-One in Morphology Processing4.8 Medium
- imagemagickImageMagick: Off-by-One in MSL decoder could result in crash6.2 Medium
- nimiq core-rs-albatross, proof-of-stake +1 moreNimiq: Remote crash via off-by-one signer bounds check in proposal buffer7.5 High
- osrg gobgposrg GoBGP bgp.go DecodeFromBytes off-by-one6.3 Medium
- moby, docker engine, red hat multicluster engine for kubernetes +7 more +9 moreMoby: Off-by-one error in plugin privilege validation6.8 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing8.4 High
- gimp, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreGimp: gimp:memory disclosure and denial of service via specially crafted pcx image6.1 Medium
- fontconfigfontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling,...5.9 Medium
- toddr xml::parser, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreXML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack9.8 Critical
- linux, linux kernel +1 morenet: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup5.5 Medium
- linux, linux kernel +1 morenet: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup5.5 Medium
- tuya arduino-tuyaopenarduino-TuyaOpen WiFiMulti Single-Byte Buffer Overflow Remote Code Execution8.6 High
- thejoshwolfe yauzlyauzl 3.2.0 - Denial of Service via Off-by-One Error in NTFS Timestamp Parser6.9 Medium
- envoyproxy envoyEnvoy has an off-by-one write in JsonEscaper::escapeString()5.3 Medium
- openclawOpenClaw < 2026.2.23 - Allowlist Exec-Guard Bypass via env -S7.1 High
- imagemagickImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder7.5 High
- Show moreLoading…