# CWE-193. Every Advisory and CVE whose sources give the weakness CWE-193, newest first. ## Records, newest first (an older page) - [Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly using FPLoginExt in BN_bin2bn in etc/uams/uams_dhx_pam.c.](https://agentprime.io/advisories/CVE-2024-38440.md) `CVE-2024-38440` · CVE record · CVSS 7.5 High · Not analysed yet · Published 16 Jun 2024 · Tags: CWE-193 - [GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-44444.md) `CVE-2023-44444` · CVE record: GIMP GIMP · CVSS 7.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.56 · Not analysed yet · Published 3 May 2024 · Tags: CWE-193 - [FFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf_showspectrum.c.](https://agentprime.io/advisories/CVE-2024-31585.md) `CVE-2024-31585` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 17 Apr 2024 · Tags: CWE-193 - [Libvirt: off-by-one error in udevlistinterfacesbystatus()](https://agentprime.io/advisories/CVE-2024-1441.md) `CVE-2024-1441` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Mar 2024 · Tags: CWE-193 - [In rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDS_MSG_RX_DGRAM_TRACE_MAX comparison, resulting in out-of-bounds access.](https://agentprime.io/advisories/CVE-2024-23849.md) `CVE-2024-23849` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 23 Jan 2024 · Tags: CWE-193 - [incorrect storage layout for contracts containing large arrays](https://agentprime.io/advisories/GHSA-6m97-7527-mh74.md) `GHSA-6m97-7527-mh74`, `CVE-2023-46247`, `PYSEC-2023-307` · PyPI `vyper`: affected `<0.3.8`, fixed in `0.3.8` · CVSS 7.5 High · Not analysed yet · Published 13 Dec 2023 · Tags: CWE-193, CWE-682 - [Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem](https://agentprime.io/advisories/CVE-2023-4260.md) `CVE-2023-4260` · CVE record: zephyrproject-rtos Zephyr · CVSS 6.3 Medium · Not analysed yet · Published 26 Sept 2023 · Tags: Memory corruption, CWE-193 - [Potential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver](https://agentprime.io/advisories/CVE-2023-4259.md) `CVE-2023-4259` · CVE record: zephyrproject-rtos Zephyr · CVSS 7.1 High · Not analysed yet · Published 25 Sept 2023 · Tags: Memory corruption, CWE-193 - [Miscompilation of wasm \`i64x2.shr_s\` instruction with constant input on x86\\\_64](https://agentprime.io/advisories/GHSA-gw5p-q8mj-p7gh.md) `GHSA-gw5p-q8mj-p7gh`, `CVE-2023-41880`, `RUSTSEC-2023-0091` · crates.io `wasmtime`: affected `>=0.0.0-0, <10.0.2 || >=11.0.0, <11.0.2 || >=12.0.0, <12.0.2`, fixed in `10.0.2`, `11.0.2`, `12.0.2` · CVSS 2.2 Low · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-193 - [Apache Tomcat - Fix for CVE-2023-24998 was incomplete](https://agentprime.io/advisories/GHSA-cx6h-86xw-9x34.md) `GHSA-cx6h-86xw-9x34`, `BIT-tomcat-2023-28709`, `CVE-2023-28709` · Maven `org.apache.tomcat.embed:tomcat-embed-core` and 1 more: affected `>=11.0.0-M2, <11.0.0-M5 || >=10.1.5, <10.1.8 || >=9.0.71, <9.0.74`, fixed in `11.0.0-M5`, `10.1.8`, `9.0.74` · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.48 · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-193 - [Contiki-NG has off-by-one error in Antelope DBMS](https://agentprime.io/advisories/CVE-2023-30546.md) `CVE-2023-30546` · CVE record: contiki-ng contiki-ng · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Apr 2023 · Tags: Memory corruption, CWE-193 - [Miscompilation of \`i8x16.select\` with the same inputs on x86\\\_64](https://agentprime.io/advisories/GHSA-xm67-587q-r2vw.md) `GHSA-xm67-587q-r2vw`, `CVE-2023-27477`, `RUSTSEC-2023-0093` · crates.io `wasmtime`: affected `>=0.0.0-0, <4.0.1 || >=5.0.0, <5.0.1 || >=6.0.0, <6.0.1`, fixed in `4.0.1`, `5.0.1`, `6.0.1` · CVSS 3.1 Low · Not analysed yet · Published 3 Mar 2023 · Tags: CWE-193 - [Off-by-one Error in gpac/gpac](https://agentprime.io/advisories/CVE-2023-0818.md) `CVE-2023-0818` · CVE record: gpac gpac/gpac · CVSS 7.1 High · Not analysed yet · Published 13 Feb 2023 · Tags: CWE-193 - [Off-by-one error in OpenImageIO](https://agentprime.io/advisories/CVE-2022-36354.md) `CVE-2022-36354` · CVE record: OpenImageIO Project OpenImageIO · CVSS 5.3 Medium · Not analysed yet · Published 23 Dec 2022 · Tags: CWE-193 - [An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19.](https://agentprime.io/advisories/CVE-2022-47517.md) `CVE-2022-47517` · CVE record · CVSS 7.5 High · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-193 - [Read one byte past a buffer when normalizing Unicode](https://agentprime.io/advisories/CVE-2022-41916.md) `CVE-2022-41916` · CVE record: heimdal heimdal · CVSS 5.9 Medium · Not analysed yet · Published 15 Nov 2022 · Tags: CWE-193 - [Off-by-one error in systemd](https://agentprime.io/advisories/CVE-2022-3821.md) `CVE-2022-3821` · CVE record: systemd · CVSS 5.5 Medium · Not analysed yet · Published 8 Nov 2022 · Tags: CWE-193 - [Off-by-one error in QEMU](https://agentprime.io/advisories/CVE-2022-3872.md) `CVE-2022-3872` · CVE record: QEMU · CVSS 8.6 High · Not analysed yet · Published 7 Nov 2022 · Tags: CWE-193 - [GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.](https://agentprime.io/advisories/CVE-2021-46848.md) `CVE-2021-46848` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Oct 2022 · Tags: CWE-193 - [Off-by-one error in Linux](https://agentprime.io/advisories/CVE-2022-3103.md) `CVE-2022-3103` · CVE record: Linux · CVSS 7.8 High · Not analysed yet · Published 26 Sept 2022 · Tags: CWE-193 - [Off-by-one error in glibc](https://agentprime.io/advisories/CVE-2021-3999.md) `CVE-2021-3999` · CVE record: glibc · CVSS 7.8 High · Not analysed yet · Published 24 Aug 2022 · Tags: CWE-193 - [Off-by-one error in radare2](https://agentprime.io/advisories/CVE-2020-27793.md) `CVE-2020-27793` · CVE record: radare2 · No CVSS score · Not analysed yet · Published 19 Aug 2022 · Tags: CWE-193 - [Off-by-one error in Accusoft ImageGear](https://agentprime.io/advisories/CVE-2022-23400.md) `CVE-2022-23400` · CVE record: Accusoft ImageGear · CVSS 7.1 High · Not analysed yet · Published 3 May 2022 · Tags: CWE-193 - [Off-by-one error in Accusoft ImageGear](https://agentprime.io/advisories/CVE-2021-21938.md) `CVE-2021-21938` · CVE record: Accusoft ImageGear · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-193 - [Off-by-one error in QEMU](https://agentprime.io/advisories/CVE-2021-3930.md) `CVE-2021-3930` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 18 Feb 2022 · Tags: CWE-193 - [Buffer Overflow in galois_2p8](https://agentprime.io/advisories/GHSA-9p8q-j6q5-mjw8.md) `GHSA-9p8q-j6q5-mjw8`, `CVE-2022-24988` · crates.io `galois_2p8`: affected `<0.1.2`, fixed in `0.1.2` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Feb 2022 · Tags: Memory corruption, CWE-193 - [Off-by-one error in Siemens JT2Go and others](https://agentprime.io/advisories/CVE-2021-44007.md) `CVE-2021-44007` · CVE record: Siemens JT2Go and 1 more · No CVSS score · Not analysed yet · Published 14 Dec 2021 · Tags: CWE-193 - [Off-by-one error in Nginx Web Server, Nginx Plus](https://agentprime.io/advisories/CVE-2021-23017.md) `CVE-2021-23017` · CVE record: Nginx Web Server, Nginx Plus · No CVSS score · EPSS 0.53 · Not analysed yet · Published 1 Jun 2021 · Tags: CWE-193 - [Heap buffer overflow caused by rounding](https://agentprime.io/advisories/GHSA-jfp7-4j67-8r3q.md) `GHSA-jfp7-4j67-8r3q`, `BIT-tensorflow-2021-29529`, `CVE-2021-29529`, `PYSEC-2021-166`, `PYSEC-2021-457`, `PYSEC-2021-655` · PyPI `tensorflow` and 2 more: affected `<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2`, fixed in `2.1.4`, `2.2.3`, `2.3.3`, `2.4.2` · CVSS 2.5 Low · Not analysed yet · Published 21 May 2021 · Tags: Memory corruption, CWE-193 - [Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends wit…](https://agentprime.io/advisories/CVE-2021-3156.md) `CVE-2021-3156` · CVE record · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 1.00 · Not analysed yet · Published 26 Jan 2021 · Tags: CWE-193 - [OFF-BY-ONE ERROR CWE-193](https://agentprime.io/advisories/CVE-2020-14510.md) `CVE-2020-14510` · CVE record: Secomea GateManager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2020 · Tags: CWE-193 - [OFF-BY-ONE ERROR CWE-193](https://agentprime.io/advisories/CVE-2020-14508.md) `CVE-2020-14508` · CVE record: Secomea GateManager · CVSS 8.1 High · Not analysed yet · Published 25 Aug 2020 · Tags: CWE-193 - [Packet length decoding error in MQTT](https://agentprime.io/advisories/CVE-2020-10062.md) `CVE-2020-10062` · CVE record: zephyrproject-rtos zephyr · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Jun 2020 · Tags: CWE-193 - [Off-by-one error in ImageMagick](https://agentprime.io/advisories/CVE-2019-10131.md) `CVE-2019-10131` · CVE record: ImageMagick ImageMagick · CVSS 6.5 Medium · Not analysed yet · Published 30 Apr 2019 · Tags: CWE-193 - [Off-by-one error in Kaspersky Lab UltraVNC](https://agentprime.io/advisories/CVE-2019-8272.md) `CVE-2019-8272` · CVE record: Kaspersky Lab UltraVNC · No CVSS score · Not analysed yet · Published 9 Mar 2019 · Tags: CWE-193 - [Off-by-one error in Kaspersky Lab UltraVNC](https://agentprime.io/advisories/CVE-2019-8268.md) `CVE-2019-8268` · CVE record: Kaspersky Lab UltraVNC · No CVSS score · Not analysed yet · Published 9 Mar 2019 · Tags: CWE-193 - [Off-by-one error in Linux kernel](https://agentprime.io/advisories/CVE-2017-2618.md) `CVE-2017-2618` · CVE record: Linux kernel · CVSS 5.5 Medium · Not analysed yet · Published 27 Jul 2018 · Tags: CWE-193 - [Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger a…](https://agentprime.io/advisories/CVE-2006-4574.md) `CVE-2006-4574` · CVE record · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2006 · Tags: CWE-193 - [Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.](https://agentprime.io/advisories/CVE-2002-1816.md) `CVE-2002-1816` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Jun 2005 · Tags: CWE-193 - [Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command.](https://agentprime.io/advisories/CVE-1999-1568.md) `CVE-1999-1568` · CVE record · CVSS 7.5 High · Not analysed yet · Published 1 Sept 2004 · Tags: CWE-193 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .