Weaknesses of type CWE-193

129 results

Erro de índice por um (off-by-one)

Ocorre quando o código usa um índice incorreto em operações com arrays, buffers ou loops — tipicamente iterando uma posição a mais ou a menos do que deveria. Isso causa acesso a memória inválida, leitura de dados além dos limites da estrutura ou corrupção de dados adjacentes.

Example

Um loop que processa um array de 10 elementos mas itera de 0 a 10 (em vez de 0 a 9) e tenta acessar array[10], lendo ou sobrescrevendo memória fora do escopo da variável. Ou uma validação de tamanho que permite um byte além do buffer esperado.

How to mitigate

Use índices a partir de 0 e compare com tamanho (i < tamanho, nunca <=). Prefira iteradores de linguagens modernas (for-each, ranges) em vez de índices manuais. Aplique testes automáticos com fuzzing e análise estática para detectar essas falhas antes da produção.

CVE-2026-33997MEDIUMMoby: Off-by-one error in plugin privilege validationEPSS 0.5%CVE-2026-52804MEDIUMGogs: Privilege Escalation via Collaboration Access Mode ValidationEPSS 0.5%CVE-2026-44042LOWUltraVNC repeater wi_uudecode off-by-one in base64 decode boundary checkEPSS 0.5%CVE-2026-58374MEDIUMIn hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link Operation (MLO) association request processing EPSS 0.5%CVE-2024-45796MEDIUMSuricata defrag: off by one can lead to policy bypassEPSS 0.5%CVE-2026-81396HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2017-2618MEDIUMA flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty (null) write EPSS 0.5%CVE-2025-47711MEDIUMNbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of serviceEPSS 0.5%CVE-2026-63387HIGHLibevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server responseEPSS 0.4%CVE-2026-55564MEDIUMFreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragmentsEPSS 0.4%CVE-2026-66806MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.4%CVE-2025-30742MEDIUMhttpd.c in atophttpd 2.8.0 has an off-by-one error and resultant out-of-bounds read because a certain 1024-character req string would not haEPSS 0.4%CVE-2022-3821MEDIUMAn off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values fEPSS 0.4%CVE-2026-26309MEDIUMEnvoy has an off-by-one write in JsonEscaper::escapeString()EPSS 0.4%CVE-2026-57160MEDIUMPJSIP: SIP message header buffer overflowEPSS 0.4%CVE-2026-69609MEDIUMWin32k Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-0818HIGHOff-by-one Error in gpac/gpacEPSS 0.4%CVE-2024-1441MEDIUMLibvirt: off-by-one error in udevlistinterfacesbystatus()EPSS 0.4%CVE-2026-76081MEDIUMZITADEL: Improper Role Revocation on Granted Projects during Multiple Role DeletionsEPSS 0.4%CVE-2025-54349MEDIUMIn iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.EPSS 0.4%