CWE-193

Off-by-one Error

Parent: CWE-682 - Incorrect Calculation

A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

198 vulnerabilities with CWE-193
CVE-2022-36354 MEDIUM
OpenImageIO master-branch-9aeece7a/v2.3.19.0 - Info Disclosure
CVSS 5.3
CVE-2022-47517 HIGH
drachtio-server < 0.8.19 - Denial of Service via Crafted UDP Message
CVSS 7.5
CVE-2022-41916 MEDIUM
Heimdal < 7.7.1 - Denial of Service in PKI Certificate Validation
CVSS 5.9
CVE-2022-3821 MEDIUM
systemd < 251 - Denial of Service via format_timespan() Off-by-one Error
CVSS 5.5
CVE-2022-3872 HIGH
QEMU < 7.1.0 - Off-by-one Read/Write in SDHCI Buffer Data Port Register
CVSS 8.6
CVE-2022-39274 HIGH
LoRaMac-node < 4.7.0 - Buffer Overflow via Improper Radio Frame Size Validation
CVSS 7.5
CVE-2022-3103 HIGH
Linux Kernel - Off-by-one Error in io_uring Module
CVSS 7.8
CVE-2022-34970 CRITICAL
Crow < 1.0+4 - Remote Code Execution via Heap-Based Buffer Overflow in qs_parse
CVSS 9.8
CVE-2022-30155 MEDIUM
Windows Kernel - Denial of Service via Off-by-one Error
CVSS 5.5
CVE-2022-23400 HIGH
Accusoft ImageGear 19.10 - Stack-Based Buffer Overflow via IGXMPXMLParser::parseDelimiter
CVSS 7.1
CVE-2022-25051 MEDIUM
rtl_433 21.12 - Off-by-one Error in cmr113_decode
CVSS 5.5
CVE-2022-24988 CRITICAL
galois_2p8 < 0.1.2 - Off-by-one Buffer Overflow in PrimitivePolynomialField::new
CVSS 9.8
CVE-2021-47373 MEDIUM
Linux Kernel 4.14-4.14.249 - Off-by-one Error in VPE Allocation
CVSS 5.5
CVE-2021-47046 HIGH
Linux Kernel - Off-by-One Read Overflow in HDCP I2C Offset Handling
CVSS 7.8
CVE-2021-46848 CRITICAL
GNU Libtasn1 <4.19.0 - Buffer Overflow
CVSS 9.1
CVE-2021-3999 HIGH
glibc < 2.31 - Off-by-one Buffer Overflow in getcwd()
CVSS 7.8
CVE-2021-21938 CRITICAL
Accusoft ImageGear - Heap-Based Buffer Overflow in Palette Box Parser
CVSS 9.8
CVE-2021-4070 CRITICAL
v2fly/v2ray-core <4.44.0 - Info Disclosure
CVSS 9.1
CVE-2021-3930 MEDIUM
QEMU < 6.2.0 - Denial of Service via SCSI MODE SELECT Command
CVSS 6.5
CVE-2021-44007 MEDIUM
JT2Go, Teamcenter Visualization <V13.2.0.5 - DoS
CVSS 5.5
CVE-2021-23017 HIGH
nginx 0.6.18-1.20.0 - Denial of Service via DNS Resolver Off-by-one Error
CVSS 7.7
CVE-2021-29529 LOW
TensorFlow < 2.1.4 - Heap Buffer Overflow in QuantizedResizeBilinear
CVSS 2.5
CVE-2021-31875 CRITICAL
Cesanta MongooseOS mJS 1.26 - Heap-Based Buffer Overflow via Malformed JSON String
CVSS 9.8
CVE-2021-3156 HIGH KEV
Sudo Heap-Based Buffer Overflow
CVSS 7.8
CVE-2020-27793 HIGH
radare2 < 4.4.0 - Denial of Service via Off-by-one Overflow in core_java.c
CVSS 7.5
Details
Vulnerabilities 198