CWE-193

Off-by-one Error

Parent: CWE-682 - Incorrect Calculation

A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

218 vulnerabilities with CWE-193
CVE-2022-39274 HIGH
LoRaMac-node < 4.7.0 - Buffer Overflow via Improper Radio Frame Size Validation
CVSS 7.5
CVE-2022-3103 HIGH
Linux Kernel - Off-by-one Error in io_uring Module
CVSS 7.8
CVE-2022-34970 CRITICAL
Crow < 1.0+4 - Remote Code Execution via Heap-Based Buffer Overflow in qs_parse
CVSS 9.8
CVE-2022-30155 MEDIUM
Windows Kernel - Denial of Service via Off-by-one Error
CVSS 5.5
CVE-2022-23400 HIGH
Accusoft ImageGear 19.10 - Stack-Based Buffer Overflow via IGXMPXMLParser::parseDelimiter
CVSS 7.1
CVE-2022-25051 MEDIUM
rtl_433 21.12 - Off-by-one Error in cmr113_decode
CVSS 5.5
CVE-2022-24988 CRITICAL
galois_2p8 < 0.1.2 - Off-by-one Buffer Overflow in PrimitivePolynomialField::new
CVSS 9.8
CVE-2021-47373 MEDIUM
Linux Kernel 4.14-4.14.249 - Off-by-one Error in VPE Allocation
CVSS 5.5
CVE-2021-47046 HIGH
Linux Kernel - Off-by-One Read Overflow in HDCP I2C Offset Handling
CVSS 7.8
CVE-2021-46848 CRITICAL
GNU Libtasn1 <4.19.0 - Buffer Overflow
CVSS 9.1
CVE-2021-3999 HIGH
glibc < 2.31 - Off-by-one Buffer Overflow in getcwd()
CVSS 7.8
CVE-2021-21938 CRITICAL
Accusoft ImageGear - Heap-Based Buffer Overflow in Palette Box Parser
CVSS 9.8
CVE-2021-4070 CRITICAL
v2fly/v2ray-core <4.44.0 - Info Disclosure
CVSS 9.1
CVE-2021-3930 MEDIUM
QEMU < 6.2.0 - Denial of Service via SCSI MODE SELECT Command
CVSS 6.5
CVE-2021-44007 MEDIUM
JT2Go, Teamcenter Visualization <V13.2.0.5 - DoS
CVSS 5.5
CVE-2021-23017 HIGH
nginx 0.6.18-1.20.0 - Denial of Service via DNS Resolver Off-by-one Error
CVSS 7.7
CVE-2021-29529 LOW
TensorFlow < 2.1.4 - Heap Buffer Overflow in QuantizedResizeBilinear
CVSS 2.5
CVE-2021-31875 CRITICAL
Cesanta MongooseOS mJS 1.26 - Heap-Based Buffer Overflow via Malformed JSON String
CVSS 9.8
CVE-2021-3156 HIGH KEV
Sudo Heap-Based Buffer Overflow
CVSS 7.8
CVE-2020-27793 HIGH
radare2 < 4.4.0 - Denial of Service via Off-by-one Overflow in core_java.c
CVSS 7.5
CVE-2020-27171 MEDIUM
Linux kernel <5.11.8 - Info Disclosure
CVSS 6.0
CVE-2020-35893 HIGH
simple-slab < 0.3.3 - Use-After-Free via remove() Off-by-One Error
CVSS 7.5
CVE-2020-29040 HIGH
Xen < 4.14.0 - Off-by-one Error in x86 HVM Guest Handling
CVSS 8.8
CVE-2020-14510 CRITICAL
GateManager < 9.2c - Unauthenticated Hardcoded Credential Exposure
CVSS 9.8
CVE-2020-14508 HIGH
Secomea GateManager <9.2c - Code Execution or Denial of Service via Off-by-One
CVSS 8.1
Details
Vulnerabilities 218