Weaknesses of type CWE-193

129 results

Erro de índice por um (off-by-one)

Ocorre quando o código usa um índice incorreto em operações com arrays, buffers ou loops — tipicamente iterando uma posição a mais ou a menos do que deveria. Isso causa acesso a memória inválida, leitura de dados além dos limites da estrutura ou corrupção de dados adjacentes.

Example

Um loop que processa um array de 10 elementos mas itera de 0 a 10 (em vez de 0 a 9) e tenta acessar array[10], lendo ou sobrescrevendo memória fora do escopo da variável. Ou uma validação de tamanho que permite um byte além do buffer esperado.

How to mitigate

Use índices a partir de 0 e compare com tamanho (i < tamanho, nunca <=). Prefira iteradores de linguagens modernas (for-each, ranges) em vez de índices manuais. Aplique testes automáticos com fuzzing e análise estática para detectar essas falhas antes da produção.

CVE-2026-18460MEDIUMOff-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.EPSS 0.3%CVE-2026-21870MEDIUMThe BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_stringEPSS 0.3%CVE-2024-53163MEDIUMcrypto: qat/qat_420xx - fix off by one in uof_get_name()EPSS 0.2%CVE-2025-11215MEDIUMOff by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform an out of bounds memory read via a craftEPSS 0.2%CVE-2024-57990HIGHwifi: mt76: mt7925: fix off by one in mt7925_load_clc()EPSS 0.2%CVE-2024-56663HIGHwifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-oneEPSS 0.2%CVE-2026-40254MEDIUMFreeRDP: contains_dotdot() off-by-one allows drive channel path traversal via terminal ..EPSS 0.2%CVE-2026-14368MEDIUMOff-by-one out-of-bounds NUL write in Zephyr LwM2M JSON string parserEPSS 0.2%CVE-2026-8357MEDIUMHeap buffer overflow in Calc formula compilationEPSS 0.2%CVE-2026-28520HIGHarduino-TuyaOpen WiFiMulti Single-Byte Buffer Overflow Remote Code ExecutionEPSS 0.2%CVE-2026-21491MEDIUMiccDEV has unicode buffer overflow in CIccTagTextDescriptionEPSS 0.2%CVE-2026-21490MEDIUMiccDEV has heap buffer overflow in CIccTagLut16::Validate()EPSS 0.2%CVE-2026-21504MEDIUMHeap Buffer Overflow in iccDEV ToneMap ParserEPSS 0.2%CVE-2024-32668HIGHbhyve(8) privileged guest escape via USB controllerEPSS 0.2%CVE-2026-44065LOWOff-by-two in papd lp_write()EPSS 0.2%CVE-2026-2703MEDIUMxlnt-community xlnt Encrypted XLSX File base64.cpp decode_base64 off-by-oneEPSS 0.2%CVE-2026-40312MEDIUMImageMagick: Off-by-One in MSL decoder could result in crashEPSS 0.2%CVE-2026-34085MEDIUMfontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, aEPSS 0.2%CVE-2026-93018MEDIUMImager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_pEPSS 0.2%CVE-2026-68767MEDIUMhashcat through 7.1.2 Off-by-One Out-of-Bounds Heap Write in fgetl()EPSS 0.2%