Weaknesses of type CWE-193

129 results

Erro de índice por um (off-by-one)

Ocorre quando o código usa um índice incorreto em operações com arrays, buffers ou loops — tipicamente iterando uma posição a mais ou a menos do que deveria. Isso causa acesso a memória inválida, leitura de dados além dos limites da estrutura ou corrupção de dados adjacentes.

Example

Um loop que processa um array de 10 elementos mas itera de 0 a 10 (em vez de 0 a 9) e tenta acessar array[10], lendo ou sobrescrevendo memória fora do escopo da variável. Ou uma validação de tamanho que permite um byte além do buffer esperado.

How to mitigate

Use índices a partir de 0 e compare com tamanho (i < tamanho, nunca <=). Prefira iteradores de linguagens modernas (for-each, ranges) em vez de índices manuais. Aplique testes automáticos com fuzzing e análise estática para detectar essas falhas antes da produção.

CVE-2026-11771HIGHOpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentiEPSS 0.7%CVE-2026-49127HIGHMusic Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24beEPSS 0.7%CVE-2026-5123MEDIUMosrg GoBGP bgp.go DecodeFromBytes off-by-oneEPSS 0.7%CVE-2023-41880LOWMiscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64EPSS 0.7%CVE-2025-53014LOWImageMagick has Heap Buffer Overflow in InterpretImageFilenameEPSS 0.6%CVE-2026-31988MEDIUMyauzl 3.2.0 - Denial of Service via Off-by-One Error in NTFS Timestamp ParserEPSS 0.6%CVE-2023-30546CRITICALContiki-NG has off-by-one error in Antelope DBMSEPSS 0.6%CVE-2026-44603LOWTor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007.EPSS 0.6%CVE-2023-27477LOWwasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the EPSS 0.6%CVE-2026-32605HIGHNimiq: Remote crash via off-by-one signer bounds check in proposal bufferEPSS 0.6%CVE-2026-12413HIGHIKEv2 Denial of Service via malformed fragmentationEPSS 0.6%CVE-2026-41502HIGHBACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID DecoderEPSS 0.6%CVE-2026-56787MEDIUMRTKLIB 2.4.3 - Off-by-One Out-of-Bounds Read in decode_ssr3 via RTCM3 SSR MessageEPSS 0.6%CVE-2025-43973MEDIUMAn issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in whEPSS 0.6%CVE-2026-46369HIGHNimiq: Validity store off by one errorEPSS 0.5%CVE-2026-4887MEDIUMGimp: gimp:memory disclosure and denial of service via specially crafted pcx imageEPSS 0.5%CVE-2026-83600MEDIUMNetdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agentEPSS 0.5%CVE-2006-10003CRITICALXML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stackEPSS 0.5%CVE-2025-43971HIGHAn issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionEPSS 0.5%CVE-2026-71391MEDIUMOff-by-One Error in GNU Emacs for AndroidEPSS 0.5%