# CWE-193.

Every Advisory and CVE whose sources give the weakness CWE-193, newest first.

## Records, newest first (an older page)

- [Music Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24be](https://agentprime.io/advisories/CVE-2026-49127.md)
  `CVE-2026-49127` · CVE record: MusicPlayerDaemon MPD · CVSS 8.8 High · Not analysed yet · Published 28 May 2026 · Tags: CWE-193
- [Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling](https://agentprime.io/advisories/CVE-2026-42015.md)
  `CVE-2026-42015` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: CWE-193
- [FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamic_binary_buffer_t class (src/dynamic_binary_buffer.hpp).](https://agentprime.io/advisories/CVE-2026-48689.md)
  `CVE-2026-48689` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 May 2026 · Tags: Memory corruption, CWE-193
- [ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix](https://agentprime.io/advisories/GHSA-jqq5-8px3-9m6m.md)
  `GHSA-jqq5-8px3-9m6m` · NuGet `Magick.NET-Q16-HDRI-x64` and 16 more: affected `<14.12.0`, fixed in `14.12.0` · CVSS 6.2 Medium · Not analysed yet · Published 21 May 2026 · Tags: CWE-193
- [Off-by-two in papd lp_write()](https://agentprime.io/advisories/CVE-2026-44065.md)
  `CVE-2026-44065` · CVE record: Netatalk Netatalk · CVSS 3.7 Low · Not analysed yet · Published 21 May 2026 · Tags: CWE-193
- [Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy](https://agentprime.io/advisories/CVE-2026-45232.md)
  `CVE-2026-45232` · CVE record: RsyncProject rsync · CVSS 2.1 Low · Not analysed yet · Published 20 May 2026 · Tags: CWE-193
- [ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.](https://agentprime.io/advisories/GHSA-533m-3wf6-c33v.md)
  `GHSA-533m-3wf6-c33v`, `CVE-2026-46559` · NuGet `Magick.NET-Q16-AnyCPU` and 17 more: affected `<14.13.1`, fixed in `14.13.1` · CVSS 4.0 Medium · Not analysed yet · Published 18 May 2026 · Tags: Memory corruption, CWE-193
- [ImageMagick: Out-of-Bounds Read of a single byte in meta encoder](https://agentprime.io/advisories/GHSA-cr6r-hmj8-pr7r.md)
  `GHSA-cr6r-hmj8-pr7r`, `CVE-2026-45358` · NuGet `Magick.NET-Q16-AnyCPU` and 17 more: affected `<14.13.1`, fixed in `14.13.1` · CVSS 5.3 Medium · Not analysed yet · Published 18 May 2026 · Tags: Memory corruption, CWE-193
- [Off-by-one error in Tor](https://agentprime.io/advisories/CVE-2026-44603.md)
  `CVE-2026-44603` · CVE record: torproject Tor · CVSS 3.7 Low · Not analysed yet · Published 7 May 2026 · Tags: CWE-193
- [Velocidex Velociraptor has an off-by-one error](https://agentprime.io/advisories/GHSA-6cmp-qv2f-x97x.md)
  `GHSA-6cmp-qv2f-x97x`, `CVE-2026-7572`, `GO-2026-5174` · Go `www.velocidex.com/golang/velociraptor`: affected `<0.76.5`, fixed in `0.76.5` · CVSS 4.4 Medium · Not analysed yet · Published 6 May 2026 · Tags: CWE-193
- [Off-by-one error in Postfix](https://agentprime.io/advisories/CVE-2026-43964.md)
  `CVE-2026-43964` · CVE record: Postfix Postfix · CVSS 3.7 Low · Not analysed yet · Published 4 May 2026 · Tags: CWE-193
- [Off-by-one error in mutt](https://agentprime.io/advisories/CVE-2026-43860.md)
  `CVE-2026-43860` · CVE record: mutt mutt · CVSS 3.7 Low · Not analysed yet · Published 4 May 2026 · Tags: CWE-193
- [Netfoil has incorrect allowlist enforcement](https://agentprime.io/advisories/GHSA-84g5-x8j3-7235.md)
  `GHSA-84g5-x8j3-7235`, `GO-2026-5240` · Go `github.com/tinfoil-factory/netfoil`: affected `<0.2.1`, fixed in `0.2.1` · CVSS 4.0, no score published · Not analysed yet · Published 29 Apr 2026 · Tags: CWE-183, CWE-193
- [BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder](https://agentprime.io/advisories/CVE-2026-41502.md)
  `CVE-2026-41502` · CVE record: bacnet-stack bacnet-stack · CVSS 8.7 High · Not analysed yet · Published 24 Apr 2026 · Tags: Memory corruption, CWE-193
- [FreeRDP: contains_dotdot() off-by-one allows drive channel path traversal via terminal ..](https://agentprime.io/advisories/CVE-2026-40254.md)
  `CVE-2026-40254` · CVE record: FreeRDP FreeRDP · CVSS 4.2 Medium · Not analysed yet · Published 24 Apr 2026 · Tags: CWE-193
- [Emacs: emacs: memory corruption vulnerability when processing svg css](https://agentprime.io/advisories/CVE-2026-6861.md)
  `CVE-2026-6861` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-193
- [ImageMagick has has an off-by-one origin validation in allows out-of-bounds read in morphology processing](https://agentprime.io/advisories/GHSA-q8h3-jv9v-57qx.md)
  `GHSA-q8h3-jv9v-57qx`, `CVE-2026-56361` · NuGet `Magick.NET-Q16-AnyCPU` and 17 more: affected `<14.12.0`, fixed in `14.12.0` · CVSS 4.8 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Memory corruption, CWE-193
- [ImageMagick has an off-by-one error in MSL decoder could result in crash](https://agentprime.io/advisories/GHSA-5xg3-585r-9jh5.md)
  `GHSA-5xg3-585r-9jh5`, `CVE-2026-40312` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.12.0`, fixed in `14.12.0` · CVSS 6.2 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-193
- [Nimiq: Remote crash via off-by-one signer bounds check in proposal buffer](https://agentprime.io/advisories/CVE-2026-32605.md)
  `CVE-2026-32605` · CVE record: nimiq core-rs-albatross · CVSS 7.5 High · Not analysed yet · Published 13 Apr 2026 · Tags: Memory corruption, CWE-193
- [osrg GoBGP bgp.go DecodeFromBytes off-by-one](https://agentprime.io/advisories/CVE-2026-5123.md)
  `CVE-2026-5123` · CVE record: osrg GoBGP · CVSS 6.3 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: CWE-189, CWE-193
- [Moby has an Off-by-one error in its plugin privilege validation](https://agentprime.io/advisories/GHSA-pxq6-2prw-chj9.md)
  `GHSA-pxq6-2prw-chj9`, `CVE-2026-33997`, `GO-2026-4883` · Go `github.com/docker/docker` and 2 more: affected `*`, no fixed version yet · CVSS 6.8 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Privilege escalation, CWE-193
- [EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing](https://agentprime.io/advisories/CVE-2026-22593.md)
  `CVE-2026-22593` · CVE record: EVerest everest-core · CVSS 8.4 High · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-193
- [Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image](https://agentprime.io/advisories/CVE-2026-4887.md)
  `CVE-2026-4887` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-193
- [Off-by-one error in fontconfig](https://agentprime.io/advisories/CVE-2026-34085.md)
  `CVE-2026-34085` · CVE record: fontconfig project fontconfig · CVSS 5.9 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-193
- [XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack](https://agentprime.io/advisories/CVE-2006-10003.md)
  `CVE-2006-10003` · CVE record: TODDR XML::Parser · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption, CWE-193
- [arduino-TuyaOpen WiFiMulti Single-Byte Buffer Overflow Remote Code Execution](https://agentprime.io/advisories/CVE-2026-28520.md)
  `CVE-2026-28520` · CVE record: Tuya arduino-TuyaOpen · CVSS 8.6 High · Not analysed yet · Published 15 Mar 2026 · Tags: CWE-193
- [yauzl contains an off-by-one error](https://agentprime.io/advisories/GHSA-gmq8-994r-jv83.md)
  `GHSA-gmq8-994r-jv83`, `CVE-2026-31988` · npm `yauzl`: affected `>=3.2.0, <3.2.1`, fixed in `3.2.1` · CVSS 6.9 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: CWE-193
- [Envoy affected by off-by-one write in JsonEscaper::escapeString()](https://agentprime.io/advisories/GHSA-56cj-wgg3-x943.md)
  `GHSA-56cj-wgg3-x943`, `BIT-envoy-2026-26309`, `CVE-2026-26309` · Go `github.com/envoyproxy/envoy`: affected `<=1.34.12 || >=1.35.0, <=1.35.8 || >=1.36.0, <=1.36.4`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-193
- [OpenClaw has allowlist exec-guard bypass via env -S](https://agentprime.io/advisories/GHSA-48wf-g7cp-gr3m.md)
  `GHSA-48wf-g7cp-gr3m`, `CVE-2026-31992` · npm `openclaw`: affected `<2026.2.23`, fixed in `2026.2.23` · CVSS 7.1 High · Not analysed yet · Published 3 Mar 2026 · Tags: CWE-184, CWE-193
- [xlnt-community xlnt Encrypted XLSX File base64.cpp decode_base64 off-by-one](https://agentprime.io/advisories/CVE-2026-2703.md)
  `CVE-2026-2703` · CVE record: xlnt-community xlnt · CVSS 4.8 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: CWE-189, CWE-193
- [The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_string](https://agentprime.io/advisories/CVE-2026-21870.md)
  `CVE-2026-21870` · CVE record: bacnet-stack bacnet-stack · CVSS 5.5 Medium · Not analysed yet · Published 13 Feb 2026 · Tags: CWE-193
- [ml-dsa's UseHint function has off by two error when r0 equals zero](https://agentprime.io/advisories/GHSA-h37v-hp6w-2pp8.md)
  `GHSA-h37v-hp6w-2pp8` · crates.io `ml-dsa`: affected `<0.1.0-rc.5`, fixed in `0.1.0-rc.5` · CVSS 4.0, no score published · Not analysed yet · Published 2 Feb 2026 · Tags: CWE-193, CWE-682
- [Heap Buffer Overflow in iccDEV ToneMap Parser](https://agentprime.io/advisories/CVE-2026-21504.md)
  `CVE-2026-21504` · CVE record: InternationalColorConsortium iccDEV · CVSS 6.6 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-193
- [iccDEV has unicode buffer overflow in CIccTagTextDescription](https://agentprime.io/advisories/CVE-2026-21491.md)
  `CVE-2026-21491` · CVE record: InternationalColorConsortium iccDEV · CVSS 6.1 Medium · Not analysed yet · Published 6 Jan 2026 · Tags: Memory corruption, CWE-193
- [iccDEV has heap buffer overflow in CIccTagLut16::Validate()](https://agentprime.io/advisories/CVE-2026-21490.md)
  `CVE-2026-21490` · CVE record: InternationalColorConsortium iccDEV · CVSS 6.1 Medium · Not analysed yet · Published 6 Jan 2026 · Tags: Memory corruption, CWE-193
- [iccDEV has heap buffer overflow in CIccTagLut8::Validate()](https://agentprime.io/advisories/CVE-2026-21494.md)
  `CVE-2026-21494` · CVE record: InternationalColorConsortium iccDEV · CVSS 6.1 Medium · Not analysed yet · Published 6 Jan 2026 · Tags: Memory corruption, CWE-193
- [Off-by-one error in Google Chrome](https://agentprime.io/advisories/CVE-2025-11215.md)
  `CVE-2025-11215` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Nov 2025 · Tags: CWE-193
- [Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers.](https://agentprime.io/advisories/CVE-2025-4582.md)
  `CVE-2025-4582` · CVE record: RTI Connext Professional · CVSS 4.8 Medium · Not analysed yet · Published 23 Sept 2025 · Tags: CWE-126, CWE-193
- [modpost: fix off by one in is_executable_section()](https://agentprime.io/advisories/CVE-2023-53397.md)
  `CVE-2023-53397` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 18 Sept 2025 · Tags: CWE-193
- [ImageMagick has a Heap Buffer Overflow in InterpretImageFilename](https://agentprime.io/advisories/GHSA-hm4x-r5hc-794f.md)
  `GHSA-hm4x-r5hc-794f`, `CVE-2025-53014` · NuGet `Magick.NET-Q16-AnyCPU` and 17 more: affected `<14.7.0`, fixed in `14.7.0` · CVSS 3.7 Low · Not analysed yet · Published 25 Aug 2025 · Tags: Memory corruption, CWE-193
- [Off-by-one error in ES iperf3](https://agentprime.io/advisories/CVE-2025-54349.md)
  `CVE-2025-54349` · CVE record: ES iperf3 · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2025 · Tags: CWE-193
- [Off-by-one error in mbedtls](https://agentprime.io/advisories/CVE-2025-52497.md)
  `CVE-2025-52497` · CVE record: Mbed mbedtls · CVSS 4.8 Medium · Not analysed yet · Published 4 Jul 2025 · Tags: CWE-193
- [Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service](https://agentprime.io/advisories/CVE-2025-47711.md)
  `CVE-2025-47711` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jun 2025 · Tags: CWE-193
- [GoBGP does not verify that the input length](https://agentprime.io/advisories/GHSA-c5jg-wr5v-2wp2.md)
  `GHSA-c5jg-wr5v-2wp2`, `CVE-2025-43973`, `GO-2025-3633` · Go `github.com/osrg/gobgp` and 1 more: affected `*`, no fixed version yet · CVSS 6.8 Medium · Not analysed yet · Published 21 Apr 2025 · Tags: CWE-193
- [GoBGP panics due to a zero value for softwareVersionLen](https://agentprime.io/advisories/GHSA-7m35-vw2c-696v.md)
  `GHSA-7m35-vw2c-696v`, `CVE-2025-43971`, `GO-2025-3631` · Go `github.com/osrg/gobgp/v3`: affected `>=3.11.0, <3.35.0`, fixed in `3.35.0` · CVSS 8.6 High · Not analysed yet · Published 21 Apr 2025 · Tags: CWE-193
- [LoongArch: BPF: Fix off-by-one error in build_prologue()](https://agentprime.io/advisories/CVE-2025-37893.md)
  `CVE-2025-37893` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Apr 2025 · Tags: CWE-193
- [Off-by-one error in pizhenwei atophttpd](https://agentprime.io/advisories/CVE-2025-30742.md)
  `CVE-2025-30742` · CVE record: pizhenwei atophttpd · CVSS 5.3 Medium · Not analysed yet · Published 26 Mar 2025 · Tags: CWE-193
- [Off-by-one error in Synology Unified Controller (DSMUC) and others](https://agentprime.io/advisories/CVE-2024-10442.md)
  `CVE-2024-10442` · CVE record: Synology Unified Controller (DSMUC) and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Mar 2025 · Tags: CWE-193
- [wifi: mt76: mt7925: fix off by one in mt7925_load_clc()](https://agentprime.io/advisories/CVE-2024-57990.md)
  `CVE-2024-57990` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 27 Feb 2025 · Tags: CWE-193
- [drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()](https://agentprime.io/advisories/CVE-2022-49365.md)
  `CVE-2022-49365` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 26 Feb 2025 · Tags: CWE-193
- [Off-by-one error in denx U-Boot](https://agentprime.io/advisories/CVE-2024-57259.md)
  `CVE-2024-57259` · CVE record: denx U-Boot · CVSS 7.1 High · Not analysed yet · Published 18 Feb 2025 · Tags: CWE-193
- [Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform](https://agentprime.io/advisories/CVE-2024-48854.md)
  `CVE-2024-48854` · CVE record: BlackBerry QNX Software Development Platform (SDP) · CVSS 5.3 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-193
- [wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one](https://agentprime.io/advisories/CVE-2024-56663.md)
  `CVE-2024-56663` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 27 Dec 2024 · Tags: CWE-193
- [crypto: qat/qat_420xx - fix off by one in uof_get_name()](https://agentprime.io/advisories/CVE-2024-53163.md)
  `CVE-2024-53163` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 24 Dec 2024 · Tags: CWE-193
- [off-by-one-error](https://agentprime.io/advisories/CVE-2024-51554.md)
  `CVE-2024-51554` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.8 High · Not analysed yet · Published 5 Dec 2024 · Tags: CWE-193
- [Suricata defrag: off by one can lead to policy bypass](https://agentprime.io/advisories/CVE-2024-45796.md)
  `CVE-2024-45796` · CVE record: OISF suricata · CVSS 5.3 Medium · Not analysed yet · Published 16 Oct 2024 · Tags: CWE-193
- [bhyve(8) privileged guest escape via USB controller](https://agentprime.io/advisories/CVE-2024-32668.md)
  `CVE-2024-32668` · CVE record: FreeBSD FreeBSD · CVSS 8.2 High · Not analysed yet · Published 5 Sept 2024 · Tags: Memory corruption, CWE-193
- [Off-by-one Error in v2fly/v2ray-core in github.com/v2fly/v2ray-core](https://agentprime.io/advisories/GHSA-4cxw-hq44-r344.md)
  `GHSA-4cxw-hq44-r344`, `CVE-2021-4070`, `GO-2022-0550` · Go `github.com/v2fly/v2ray-core` and 1 more: affected `*`, no fixed version yet · CVSS 5.9 Medium · Not analysed yet · Published 21 Aug 2024 · Tags: CWE-193
- [Off-by-one error in Ivanti Avalanche](https://agentprime.io/advisories/CVE-2024-36136.md)
  `CVE-2024-36136` · CVE record: Ivanti Avalanche · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-193
- [Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf\[len\] to '\0' in FPMapName in afp_mapname in etc/afpd/directory.c.](https://agentprime.io/advisories/CVE-2024-38441.md)
  `CVE-2024-38441` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2024 · Tags: CWE-193

Newest: <https://agentprime.io/advisories/tag/cwe-193.md>
Older: <https://agentprime.io/advisories/tag/cwe-193.md?cursor=WyIyMDI0LTA2LTE2VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNC0zODQ0MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-193&cursor=WyIyMDI2LTA2LTEwVDIwOjAwOjI0LjE3NzAwMFoiLCJDVkUtMjAyNi00NTM4MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-193/?cursor=WyIyMDI2LTA2LTEwVDIwOjAwOjI0LjE3NzAwMFoiLCJDVkUtMjAyNi00NTM4MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.