CWE-193

218 vulnerabilities with CWE-193

CVE-2026-11771 HIGH

OpenVPN - Stack-based Buffer Overflow

CVE-2026-14899 HIGH

Off-by-one out of bounds read in MIME header parser for forwarding

CVSS 7.5

CVE-2026-44687 LOW

NLnet Labs Unbound < 1.25.2 - Stub/Forward Zone Shadowing

CVSS 3.7

CVE-2026-50497 MEDIUM

Microsoft Windows 10 Version 1607 - Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

CVSS 6.5

CVE-2026-58380 HIGH

Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()

CVSS 7.3

CVE-2026-12413 HIGH

libreswan - IKEv2 Denial of Service via Malformed Fragmentation

CVSS 7.5

CVE-2026-7831 HIGH

UltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing

CVSS 7.6

CVE-2026-44042 LOW

UltraVNC repeater wi_uudecode off-by-one in base64 decode boundary check

CVSS 3.7

CVE-2026-58374 MEDIUM

W1.fi Hostapd < 2.12 - Off-by-one Error

CVSS 6.5

CVE-2026-58014 HIGH

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

CVSS 7.3

CVE-2026-53309 CRITICAL

ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison

CVSS 9.8

CVE-2026-53306 MEDIUM

tty: hvc_iucv: fix off-by-one in number of supported devices

CVSS 5.5

CVE-2026-56790 HIGH

CANBoat - Off-by-One Global Buffer Overflow in searchForPgn()

CVSS 7.3

CVE-2026-56787 MEDIUM

RTKLIB 2.4.3 - Off-by-One Out-of-Bounds Read in decode_ssr3 via RTCM3 SSR Message

CVSS 6.5

CVE-2026-53263 MEDIUM

6lowpan: fix off-by-one in multicast context address compression

CVSS 5.5

CVE-2026-52804 MEDIUM

Gogs: Privilege Escalation via Collaboration Access Mode Validation

CVE-2026-53088 CRITICAL

net: bcmgenet: fix off-by-one in bcmgenet_put_txcb

CVSS 9.8

CVE-2026-53036 HIGH

bpf, arm64: Fix off-by-one in check_imm signed range check

CVSS 7.8

CVE-2026-8357 HIGH

The Document Foundation LibreOffice - Heap Buffer Overflow in Calc Formula Compilation

CVSS 7.8

CVE-2026-54410 HIGH

Debevv nanoMODBUS < 1.23.0 - Off-by-one Error

CVSS 8.6

CVE-2026-46559 MEDIUM

ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder

CVSS 4.0

CVE-2026-45380 LOW

bit7z: Path Traversal via Null Byte Injection from `gcount()` Off-by-One in `restoreSymlink()`

CVSS 3.6

CVE-2026-45358 MEDIUM

ImageMagick: Out-of-Bounds Read of a single byte in meta encoder

CVSS 5.3

CVE-2026-52907 HIGH

media: rockchip: rkcif: fix off by one bugs

CVSS 7.8

CVE-2026-49127 HIGH

Music Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24be

CVSS 8.6