CWE-193.

Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly using FPLoginExt in BN_bin2bn in etc/uams/uams_dhx_pam.c.

• CWE-193

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability

• GIMP
• CWE-193

FFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf_showspectrum.c.

• CWE-193

Libvirt: off-by-one error in udevlistinterfacesbystatus()

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• CWE-193

In rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDS_MSG_RX_DGRAM_TRACE_MAX comparison, resulting in out-of-bounds access.

• CWE-193

incorrect storage layout for contracts containing large arrays

• CWE-193
• CWE-682

<0.3.8 · fixed in 0.3.8

Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem

• Zephyr
• Memory corruption
• CWE-193

Potential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver

• Zephyr
• Memory corruption
• CWE-193

Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86\_64

• CWE-193

>=0.0.0-0, <10.0.2 || >=11.0.0, <11.0.2 || >=12.0.0, <12.0.2 · fixed in 10.0.2, 11.0.2, 12.0.2

Apache Tomcat - Fix for CVE-2023-24998 was incomplete

• CWE-193

>=11.0.0-M2, <11.0.0-M5 || >=10.1.5, <10.1.8 || >=9.0.71, <9.0.74 · fixed in 11.0.0-M5, 10.1.8, 9.0.74

Contiki-NG has off-by-one error in Antelope DBMS

• contiki-ng
• Memory corruption
• CWE-193

Miscompilation of `i8x16.select` with the same inputs on x86\_64

• CWE-193

>=0.0.0-0, <4.0.1 || >=5.0.0, <5.0.1 || >=6.0.0, <6.0.1 · fixed in 4.0.1, 5.0.1, 6.0.1

Off-by-one Error in gpac/gpac

• gpac/gpac
• CWE-193

Off-by-one error in OpenImageIO

• OpenImageIO
• CWE-193

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19.

• CWE-193

Read one byte past a buffer when normalizing Unicode

• heimdal
• CWE-193

Off-by-one error in systemd

• systemd
• CWE-193

Off-by-one error in QEMU

• QEMU
• CWE-193

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

• CWE-193

Off-by-one error in Linux

• Linux
• CWE-193

Off-by-one error in glibc

• glibc
• CWE-193

Off-by-one error in radare2

• radare2
• CWE-193

Off-by-one error in Accusoft ImageGear

• Accusoft ImageGear
• CWE-193

Off-by-one error in Accusoft ImageGear

• Accusoft ImageGear
• CWE-193

Off-by-one error in QEMU

• QEMU
• CWE-193

Buffer Overflow in galois_2p8

• Memory corruption
• CWE-193

<0.1.2 · fixed in 0.1.2

Off-by-one error in Siemens JT2Go and others

• Siemens JT2Go
• Siemens Teamcenter Visualization
• CWE-193

Off-by-one error in Nginx Web Server, Nginx Plus

• Nginx Web Server, Nginx Plus
• CWE-193

Heap buffer overflow caused by rounding

• Memory corruption
• CWE-193

<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2 · fixed in 2.1.4, 2.2.3, 2.3.3, 2.4.2

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends wit…

• CWE-193

OFF-BY-ONE ERROR CWE-193

• Secomea GateManager
• CWE-193

OFF-BY-ONE ERROR CWE-193

• Secomea GateManager
• CWE-193

Packet length decoding error in MQTT

• zephyr
• CWE-193

Off-by-one error in ImageMagick

• ImageMagick
• CWE-193

Off-by-one error in Kaspersky Lab UltraVNC

• Kaspersky Lab UltraVNC
• CWE-193

Off-by-one error in Kaspersky Lab UltraVNC

• Kaspersky Lab UltraVNC
• CWE-193

Off-by-one error in Linux kernel

• Linux kernel
• CWE-193

Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger a…

• CWE-193

Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

• CWE-193

Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command.

• CWE-193