CWE-193

Off-by-one Error

Parent: CWE-682 - Incorrect Calculation

A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

218 vulnerabilities with CWE-193
CVE-2024-48854 MEDIUM
QNX SDP 7.0, 7.1, 8.0 - Info Disclosure via TIFF Codec Off-by-one
CVSS 5.3
CVE-2024-56720 MEDIUM
Linux Kernel - Use-After-Free in BPF sockmap sk_msg_shift_left
CVSS 5.5
CVE-2024-56663 HIGH
Linux Kernel - Off-by-one Error in NL80211_ATTR_MLO_LINK_ID Validation
CVSS 7.1
CVE-2024-53163 MEDIUM
Linux Kernel - Off-by-one Error in uof_get_name()
CVSS 5.5
CVE-2024-53149 MEDIUM
Linux Kernel - Off-by-one Error in UCSI Connector Status Handling
CVSS 4.6
CVE-2024-51554 CRITICAL
ABB ASPECT Enterprise, NEXUS Series, MATRIX Series < 3.08.03 - Default Credential Vulnerability
CVSS 9.1
CVE-2024-49880 HIGH
Linux Kernel 6.8-6.10.13, 6.11.0-6.11.2 - Off-by-One Error in ext4 alloc_flex_gd
CVSS 7.8
CVE-2024-49862 HIGH
Linux Kernel 6.5-6.6.53, 6.7-6.10.12, 6.11.0-6.11.1 - Off-by-one Error in get_rpi()
CVSS 7.1
CVE-2024-47686 HIGH
Linux Kernel 5.16-6.1.112, 6.2-6.6.53, 6.7-6.10.12, 6.11.0-6.11.1 - Off-by-one Error in ep93xx_div_recalc_rate()
CVSS 7.1
CVE-2024-47682 HIGH
Linux Kernel 5.19-6.1.112, 6.2-6.6.53, 6.7-6.10.12, 6.11-6.11.1 - Off-by-one Error in sd_read_block_characteristics()
CVSS 7.8
CVE-2024-45796 MEDIUM
Suricata < 7.0.7 - Denial of Service via Fragment Reassembly Logic Error
CVSS 5.3
CVE-2024-46852 HIGH
Linux Kernel 5.11-6.110, 5.15.0-167, 5.16.0-6.110, 6.2.0-6.6.51, 6.7.0-6.10.10 - CMA Heap Off-by-one Error
CVSS 7.8
CVE-2024-32668 HIGH
FreeBSD 13.0-13.2 - Authenticated Heap-Based Buffer Overflow in USB Code
CVSS 8.2
CVE-2024-43852 HIGH
Linux Kernel 6.7-6.10.2 - Off-by-one Error in LTC2991 Temperature Channel Validation
CVSS 7.8
CVE-2024-36136 HIGH
Ivanti Avalanche 6.3.1 - Unauthenticated Denial of Service via WLInfoRailService Off-by-one Error
CVSS 7.5
CVE-2024-38441 CRITICAL
netatalk 2.0.0-2.4.0 and 3.1.0-3.2.0 - Heap-Based Buffer Overflow via FPMapName in afp_mapname
CVSS 9.8
CVE-2024-38440 HIGH
netatalk 2.0.0-2.4.0 - Heap-Based Buffer Overflow via FPLoginExt BN_bin2bn
CVSS 7.5
CVE-2024-36957 MEDIUM
Linux Kernel - Off-by-One Read in octeontx2-af Userspace Buffer Handling
CVSS 5.5
CVE-2024-36025 MEDIUM
Linux Kernel 5.15-5.15.155, 5.16-6.1.86, 6.2-6.6.27, 6.7-6.8.6 - Off-by-one Error in qla_edif_app_getstats
CVSS 5.5
CVE-2024-26995 HIGH
Linux Kernel 6.8-6.8.7 - Off-by-one Error in TCPM PDO Counting
CVSS 7.8
CVE-2024-31585 MEDIUM
FFmpeg 5.1-6.1 - Denial of Service via Off-by-one Error in libavfilter/avf_showspectrum.c
CVSS 5.3
CVE-2024-26766 MEDIUM
Linux Kernel - Memory Corruption via SDMA Descriptor Array Overflow in hfi1 Driver
CVSS 5.5
CVE-2024-1441 MEDIUM
Red Hat Enterprise Linux 9 - Denial of Service via udevListInterfacesByStatus Off-by-One Error
CVSS 5.5
CVE-2024-23849 MEDIUM
Linux Kernel < 6.7.1 - Off-by-one Error in rds_recv_track_latency
CVSS 5.5
CVE-2023-53397 MEDIUM
Linux Kernel 4.1-4.14.321 - Off-by-One Error in modpost is_executable_section()
CVSS 5.5
Details
Vulnerabilities 218