# CWE-193.

Every Advisory and CVE whose sources give the weakness CWE-193, newest first.

## Records, newest first

- [FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsing](https://agentprime.io/advisories/CVE-2026-116781.md)
  `CVE-2026-116781` · CVE record: signalwire freeswitch · CVSS 5.3 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption, CWE-193
- [FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequences](https://agentprime.io/advisories/CVE-2026-116574.md)
  `CVE-2026-116574` · CVE record: signalwire freeswitch · CVSS 5.9 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption, CWE-193
- [psqlODBC ODBC escape parser stack buffer overflow](https://agentprime.io/advisories/CVE-2026-120061.md)
  `CVE-2026-120061` · CVE record: PostgreSQL psqlODBC · CVSS 7.5 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption, CWE-193
- [vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)](https://agentprime.io/advisories/GHSA-q97c-p368-75c4.md)
  `GHSA-q97c-p368-75c4`, `CVE-2026-115916`, `PYSEC-2026-4347` · PyPI `vllm`: affected `<0.32.0`, fixed in `0.32.0` · CVSS 6.5 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-129, CWE-193
- [snappy-java: Heap buffer overflow in Snappy.uncompress\*Array typed-array methods](https://agentprime.io/advisories/GHSA-gwq9-9ffj-mvrv.md)
  `GHSA-gwq9-9ffj-mvrv`, `CVE-2026-93451` · Maven `org.xerial.snappy:snappy-java`: affected `<1.1.10.9`, fixed in `1.1.10.9` · CVSS 6.9 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption, CWE-193
- [libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_6c_record_entries](https://agentprime.io/advisories/CVE-2026-116735.md)
  `CVE-2026-116735` · CVE record: libyal libpff · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-193
- [Mod_qos: query truncation during json body merging permits security-rule bypass](https://agentprime.io/advisories/CVE-2026-114460.md)
  `CVE-2026-114460` · CVE record: pbuchbinder mod_qos · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-193
- [IBM MQ Buffer Overflow](https://agentprime.io/advisories/CVE-2026-12727.md)
  `CVE-2026-12727` · CVE record: IBM MQ Operator and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-193
- [unarr through 1.1.1 Off-by-One Heap Buffer Overflow via tar_get_name](https://agentprime.io/advisories/CVE-2026-111273.md)
  `CVE-2026-111273` · CVE record: selmf unarr · CVSS 6.9 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-193
- [Microsoft Office Word Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-108443.md)
  `CVE-2026-108443` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-193
- [Remote DoS via receive-side kernel TLS](https://agentprime.io/advisories/CVE-2026-101302.md)
  `CVE-2026-101302` · CVE record: FreeBSD FreeBSD · CVSS 6.5 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Memory corruption, CWE-193
- [Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write via mxml_strtod()](https://agentprime.io/advisories/CVE-2026-110604.md)
  `CVE-2026-110604` · CVE record: Michael R Sweet Mini-XML · CVSS 2.0 Low · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-193
- [Microsoft Office Excel Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-97741.md)
  `CVE-2026-97741` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 3 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-193
- [Microsoft Office Visio Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-102857.md)
  `CVE-2026-102857` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 2 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-193
- [Coraza: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass](https://agentprime.io/advisories/GHSA-pc5q-qfxp-ggqv.md)
  `GHSA-pc5q-qfxp-ggqv`, `CVE-2026-104774`, `GO-2026-6696` · Go `github.com/corazawaf/coraza/v3`: affected `>=3.0.0, <3.8.0`, fixed in `3.8.0` · CVSS 5.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-172, CWE-193, CWE-693
- [wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms](https://agentprime.io/advisories/CVE-2026-83742.md)
  `CVE-2026-83742` · CVE record: wolfSSL Inc. wolfSSH · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption, CWE-193
- [In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a m…](https://agentprime.io/advisories/CVE-2026-42618.md)
  `CVE-2026-42618` · CVE record · CVSS 7.1 High · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption, CWE-193
- [Off-by-one error in OpenBSD OpenSSH](https://agentprime.io/advisories/CVE-2026-106584.md)
  `CVE-2026-106584` · CVE record: OpenBSD OpenSSH · CVSS 2.5 Low · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-193
- [Sssd: sssd: access control bypass via improper ldap shadow expiration check](https://agentprime.io/advisories/CVE-2026-104033.md)
  `CVE-2026-104033` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-193
- [DHCP client option walk drifts one byte per skipped option, reading past the received message and past the saved options buffer](https://agentprime.io/advisories/CVE-2026-102720.md)
  `CVE-2026-102720` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, CWE-193
- [Trusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-one](https://agentprime.io/advisories/CVE-2026-101014.md)
  `CVE-2026-101014` · CVE record: Trusted Domain Project OpenDMARC · CVSS 6.9 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-189, CWE-193
- [Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one](https://agentprime.io/advisories/CVE-2026-100889.md)
  `CVE-2026-100889` · CVE record: Trusted Domain Project OpenDKIM · CVSS 6.9 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: CWE-189, CWE-193
- [Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.](https://agentprime.io/advisories/CVE-2026-18460.md)
  `CVE-2026-18460` · CVE record: RTI Connext Professional · CVSS 6.9 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Memory corruption, CWE-193
- [Netdata: Streaming protocol chart slot guard off-by-one allows \~16 GiB allocation request, crashing parent agent](https://agentprime.io/advisories/CVE-2026-83600.md)
  `CVE-2026-83600` · CVE record: netdata netdata · CVSS 6.5 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Denial of service, CWE-193
- [Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p](https://agentprime.io/advisories/CVE-2026-93018.md)
  `CVE-2026-93018` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption, CWE-193
- [ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions](https://agentprime.io/advisories/GHSA-v859-c572-qh5p.md)
  `GHSA-v859-c572-qh5p`, `CVE-2026-76081`, `GO-2026-6473` · Go `github.com/zitadel/zitadel`: affected `<4.16.0`, fixed in `4.16.0` · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-193
- [alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in \_\_snd_ctl_ascii_elem_id_parse()](https://agentprime.io/advisories/CVE-2026-90781.md)
  `CVE-2026-90781` · CVE record: ALSA Project alsa-lib · CVSS 4.8 Medium · Not analysed yet · Published 13 Sept 2026 · Tags: CWE-193
- [Microsoft Excel Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-81396.md)
  `CVE-2026-81396` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-193
- [Win32k Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69609.md)
  `CVE-2026-69609` · CVE record: Microsoft Microsoft Office 365 for Mac and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-193
- [D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one](https://agentprime.io/advisories/CVE-2026-86297.md)
  `CVE-2026-86297` · CVE record: D-Link DIR-605 · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2026 · Tags: CWE-189, CWE-193
- [Stack-based buffer overflow in OpenVPN](https://agentprime.io/advisories/CVE-2026-81738.md)
  `CVE-2026-81738` · CVE record: OpenVPN OpenVPN · CVSS 2.3 Low · Not analysed yet · Published 7 Sept 2026 · Tags: Memory corruption, CWE-193
- [PJSIP: SIP message header buffer overflow](https://agentprime.io/advisories/CVE-2026-57160.md)
  `CVE-2026-57160` · CVE record: pjsip pjproject · CVSS 6.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: CWE-193
- [MOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in Serial Telegram Handling](https://agentprime.io/advisories/CVE-2026-85454.md)
  `CVE-2026-85454` · CVE record: themoos core-moos · CVSS 5.2 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-193
- [Off-by-one out-of-bounds NUL write in Zephyr LwM2M JSON string parser](https://agentprime.io/advisories/CVE-2026-14368.md)
  `CVE-2026-14368` · CVE record: zephyrproject zephyr · CVSS 5.4 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Memory corruption, CWE-193
- [Apache Tomcat: RewriteValve \[N\] restarts at the second rule and may bypass access control](https://agentprime.io/advisories/CVE-2026-65927.md)
  `CVE-2026-65927` · CVE record: Apache Software Foundation Apache Tomcat · CVSS 7.5 High · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-193
- [Off-by-one error in Google Chrome](https://agentprime.io/advisories/CVE-2026-79148.md)
  `CVE-2026-79148` · CVE record: Google Chrome · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-193
- [hashcat through 7.1.2 Off-by-One Out-of-Bounds Heap Write in fgetl()](https://agentprime.io/advisories/CVE-2026-68767.md)
  `CVE-2026-68767` · CVE record: hashcat hashcat · CVSS 6.9 Medium · Not analysed yet · Published 22 Aug 2026 · Tags: CWE-193
- [Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response](https://agentprime.io/advisories/CVE-2026-63387.md)
  `CVE-2026-63387` · CVE record: libevent libevent · CVSS 7.0 High · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption, CWE-193
- [FreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragments](https://agentprime.io/advisories/CVE-2026-55564.md)
  `CVE-2026-55564` · CVE record: FreeRDP FreeRDP · CVSS 5.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption, CWE-193
- [nimiq-blockchain: Validity store off by one error](https://agentprime.io/advisories/GHSA-3763-qp59-59vf.md)
  `GHSA-3763-qp59-59vf`, `CVE-2026-46369` · crates.io `nimiq-blockchain`: affected `<1.5.1`, fixed in `1.5.1` · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Authentication bypass, CWE-193
- [Microsoft Office Word Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-66806.md)
  `CVE-2026-66806` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption, CWE-193
- [Off-by-One Error in GNU Emacs for Android](https://agentprime.io/advisories/CVE-2026-71391.md)
  `CVE-2026-71391` · CVE record: GNU Emacs · CVSS 5.3 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-193
- [Off-by-one error in OpenVPN](https://agentprime.io/advisories/CVE-2026-11771.md)
  `CVE-2026-11771` · CVE record: OpenVPN OpenVPN · CVSS 7.0 High · Not analysed yet · Published 30 Jul 2026 · Tags: Memory corruption, CWE-193
- [ImageMagick: Information Disclosure when printing profiles with debug enabled](https://agentprime.io/advisories/GHSA-hwf3-r46v-5ggx.md)
  `GHSA-hwf3-r46v-5ggx`, `CVE-2026-61862` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 2.1 Low · Not analysed yet · Published 24 Jul 2026 · Tags: Memory corruption, CWE-193
- [Off-by-one out of bounds read in MIME header parser for forwarding](https://agentprime.io/advisories/CVE-2026-14899.md)
  `CVE-2026-14899` · CVE record: Mozilla Thunderbird · CVSS 7.5 High · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-193
- [Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN](https://agentprime.io/advisories/CVE-2026-44687.md)
  `CVE-2026-44687` · CVE record: NLnet Labs Unbound · CVSS 3.7 Low · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-193
- [Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-50497.md)
  `CVE-2026-50497` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption, CWE-193
- [Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()](https://agentprime.io/advisories/CVE-2026-58380.md)
  `CVE-2026-58380` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.3 High · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-193
- [IKEv2 Denial of Service via malformed fragmentation](https://agentprime.io/advisories/CVE-2026-12413.md)
  `CVE-2026-12413` · CVE record: The Libreswan Project libreswan · CVSS 7.5 High · Not analysed yet · Published 2 Jul 2026 · Tags: Denial of service, CWE-193
- [UltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing](https://agentprime.io/advisories/CVE-2026-7831.md)
  `CVE-2026-7831` · CVE record: uvnc UltraVNC · CVSS 7.5 High · Not analysed yet · Published 1 Jul 2026 · Tags: Memory corruption, CWE-193
- [UltraVNC repeater wi_uudecode off-by-one in base64 decode boundary check](https://agentprime.io/advisories/CVE-2026-44042.md)
  `CVE-2026-44042` · CVE record: uvnc UltraVNC · CVSS 3.7 Low · Not analysed yet · Published 1 Jul 2026 · Tags: CWE-193
- [Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"](https://agentprime.io/advisories/CVE-2026-58014.md)
  `CVE-2026-58014` · CVE record: GNOME GLib and 4 more · CVSS 7.3 High · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-193
- [Off-by-one error in w1.fi hostapd](https://agentprime.io/advisories/CVE-2026-58374.md)
  `CVE-2026-58374` · CVE record: w1.fi hostapd · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-193
- [CANBoat - Off-by-One Global Buffer Overflow in searchForPgn()](https://agentprime.io/advisories/CVE-2026-56790.md)
  `CVE-2026-56790` · CVE record: canboat canboat · CVSS 7.0 High · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-193
- [RTKLIB 2.4.3 - Off-by-One Out-of-Bounds Read in decode_ssr3 via RTCM3 SSR Message](https://agentprime.io/advisories/CVE-2026-56787.md)
  `CVE-2026-56787` · CVE record: tomojitakasu RTKLIB · CVSS 6.9 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-193
- [net: bcmgenet: fix off-by-one in bcmgenet_put_txcb](https://agentprime.io/advisories/CVE-2026-53088.md)
  `CVE-2026-53088` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2026 · Tags: CWE-193
- [Gogs Vulnerable to Privilege Escalation via Collaboration Access Mode Validation](https://agentprime.io/advisories/GHSA-4565-r4x7-hg8j.md)
  `GHSA-4565-r4x7-hg8j`, `CVE-2026-52804`, `GO-2026-5110` · Go `gogs.io/gogs`: affected `<0.14.3`, fixed in `0.14.3` · CVSS 5.5 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: CWE-193
- [Heap buffer overflow in Calc formula compilation](https://agentprime.io/advisories/CVE-2026-8357.md)
  `CVE-2026-8357` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption, CWE-193
- [nanoMODBUS Off-by-One Buffer Overflow in recv_msg_header() via Crafted MBAP Length Field](https://agentprime.io/advisories/CVE-2026-54410.md)
  `CVE-2026-54410` · CVE record: debevv nanoMODBUS · CVSS 7.8 High · Not analysed yet · Published 14 Jun 2026 · Tags: Memory corruption, CWE-193
- [bit7z: Path Traversal via Null Byte Injection from \`gcount()\` Off-by-One in \`restoreSymlink()\`](https://agentprime.io/advisories/CVE-2026-45380.md)
  `CVE-2026-45380` · CVE record: rikyoz bit7z · CVSS 3.6 Low · Not analysed yet · Published 10 Jun 2026 · Tags: Path traversal, CWE-193

Older: <https://agentprime.io/advisories/tag/cwe-193.md?cursor=WyIyMDI2LTA2LTEwVDIwOjAwOjI0LjE3NzAwMFoiLCJDVkUtMjAyNi00NTM4MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-193>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-193/>. Everything for agents: <https://agentprime.io/llms.txt>.