Falhas do tipo CWE-193

151 resultados

Erro de Limite de Fora por Um (Off-by-One)

Um erro de lógica onde um loop, índice de array ou comparação numérica erra por exatamente uma unidade, acessando posição inválida de memória ou pulando uma iteração crítica. Isso causa corrupção de dados, leitura além dos limites ou execução incorreta de lógica sensível.

Exemplo

Um loop que deveria processar 100 elementos (índices 0-99) itera até 100 inclusive, tentando acessar o índice 100 que não existe. Ou um verificador que compara `if (tamanho <= 256)` quando deveria ser `<`, deixando passar um byte além do permitido.

Como mitigar

Use idiomas seguros: iteradores de linguagens modernas (for-each), funções de biblioteca que já tratam limites, e valide explicitamente ranges antes de loops. Em código crítico, teste cases nas bordas (0, 1, tamanho-1, tamanho) e use análise estática que detecta comparações suspeitas.

CVE-2023-0818HIGHOff-by-one Error in gpac/gpacEPSS 0.4%CVE-2026-53088CRITICALnet: bcmgenet: fix off-by-one in bcmgenet_put_txcbEPSS 0.4%CVE-2026-76081MEDIUMZITADEL: Improper Role Revocation on Granted Projects during Multiple Role DeletionsEPSS 0.4%CVE-2024-51554HIGHoff-by-one-errorEPSS 0.4%CVE-2026-116574MEDIUMFreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequencesEPSS 0.4%CVE-2026-11771HIGHOpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentiEPSS 0.4%CVE-2024-48854MEDIUMVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development PlatformEPSS 0.4%CVE-2024-57259HIGHsqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory liEPSS 0.4%CVE-2026-120061HIGHpsqlODBC ODBC escape parser stack buffer overflowEPSS 0.3%CVE-2026-44603LOWTor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007.EPSS 0.3%CVE-2026-79148CRITICALOff-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially EPSS 0.3%CVE-2021-3930—An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page(EPSS 0.3%CVE-2026-45232LOWRsync < 3.4.3 Off-by-One Stack Write via HTTP ProxyEPSS 0.3%CVE-2024-31585MEDIUMFFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf_showspectrum.c. This vulnerabilitEPSS 0.3%CVE-2026-81738LOWOpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEPSS 0.3%CVE-2025-52497MEDIUMMbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls_pem_read_buffer and two mbedtls_pk_parse functions,EPSS 0.3%CVE-2026-55564MEDIUMFreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragmentsEPSS 0.3%CVE-2026-104774MEDIUMOWASP Coraza WAF: jsDecode Off-by-One in Octal Escape Handling Enables WAF BypassEPSS 0.3%CVE-2026-85454MEDIUMMOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in Serial Telegram HandlingEPSS 0.3%CVE-2026-101014MEDIUMTrusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-oneEPSS 0.3%