CWE-193

218 vulnerabilities with CWE-193

CVE-2026-46066 MEDIUM

ceph: fix num_ops off-by-one when crypto allocation fails

CVSS 5.5

CVE-2026-42015 MEDIUM

Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

CVSS 5.3

CVE-2026-48689 CRITICAL

Pavel-odintsov Fastnetmon < 1.2.9 - Out-of-bounds Write

CVSS 9.8

CVE-2026-44065 MEDIUM

Netatalk papd lp_write() - Adjacent Data Modification and Service Disruption

CVSS 4.2

CVE-2026-45232 LOW

Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy

CVSS 3.1

CVE-2026-44603 LOW

Tor < 0.4.9.7 - Out-of-Bounds Read via Malformed BEGIN Cell

CVSS 3.7

CVE-2026-7572 MEDIUM

Velociraptor EVTX Parser — Process Crash via Crafted .evtx File

CVSS 4.4

CVE-2026-43964 LOW

Postfix < 3.8.16, 3.9 < 3.9.10, 3.10 < 3.10.9 - Denial of Service via Enhanced Status Code Parsing

CVSS 3.7

CVE-2026-43860 LOW

mutt < 2.3.2 - Off-by-one Error in IMAP CRAM-MD5 Password Hashing

CVSS 3.7

CVE-2026-41502 HIGH

BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder

CVSS 7.5

CVE-2026-40254 MEDIUM

FreeRDP: contains_dotdot() off-by-one allows drive channel path traversal via terminal ..

CVSS 4.2

CVE-2026-6861 MEDIUM

Emacs: emacs: memory corruption vulnerability when processing svg css

CVSS 6.1

CVE-2026-40312 MEDIUM

ImageMagick: Off-by-One in MSL decoder could result in crash

CVSS 6.2

CVE-2026-32605 HIGH

Nimiq: Remote crash via off-by-one signer bounds check in proposal buffer

CVSS 7.5

CVE-2026-33997 MEDIUM

Moby: Off-by-one error in plugin privilege validation

CVSS 6.8

CVE-2026-5123 LOW

osrg GoBGP bgp.go DecodeFromBytes off-by-one

CVSS 3.7

CVE-2026-22593 HIGH

EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing

CVSS 8.4

CVE-2026-4887 MEDIUM

Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image

CVSS 6.1

CVE-2026-34085 MEDIUM

fontconfig < 2.17.1 - Off-by-one Error in FcFontCapabilities

CVSS 5.9

CVE-2026-23257 MEDIUM

net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup

CVSS 5.5

CVE-2026-23256 MEDIUM

net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup

CVSS 5.5

CVE-2026-28520 HIGH

arduino-TuyaOpen WiFiMulti Single-Byte Buffer Overflow Remote Code Execution

CVSS 8.4

CVE-2026-31988 MEDIUM

yauzl 3.2.0 - Denial of Service via Off-by-One Error in NTFS Timestamp Parser

CVSS 5.3

CVE-2026-26309 MEDIUM

Envoy < 1.37.1, 1.36.5, 1.35.8, 1.34.13 - Off-by-one Write in JsonEscaper

CVSS 5.3

CVE-2026-25989 HIGH

ImageMagick <7.1.2-15/6.9.13-40 - DoS

CVSS 7.5