Falhas do tipo CWE-193

129 resultados

Erro de Limite de Fora por Um (Off-by-One)

Um erro de lógica onde um loop, índice de array ou comparação numérica erra por exatamente uma unidade, acessando posição inválida de memória ou pulando uma iteração crítica. Isso causa corrupção de dados, leitura além dos limites ou execução incorreta de lógica sensível.

Exemplo

Um loop que deveria processar 100 elementos (índices 0-99) itera até 100 inclusive, tentando acessar o índice 100 que não existe. Ou um verificador que compara `if (tamanho <= 256)` quando deveria ser `<`, deixando passar um byte além do permitido.

Como mitigar

Use idiomas seguros: iteradores de linguagens modernas (for-each), funções de biblioteca que já tratam limites, e valide explicitamente ranges antes de loops. Em código crítico, teste cases nas bordas (0, 1, tamanho-1, tamanho) e use análise estática que detecta comparações suspeitas.

CVE-2026-71391MEDIUMOff-by-One Error in GNU Emacs for AndroidEPSS 0.3%CVE-2024-23849MEDIUMIn rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDS_MSG_RX_DGRAM_TRACE_EPSS 0.3%CVE-2026-56790HIGHCANBoat - Off-by-One Global Buffer Overflow in searchForPgn()EPSS 0.3%CVE-2024-31585MEDIUMFFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf_showspectrum.c. This vulnerabilitEPSS 0.3%CVE-2026-66806MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.3%CVE-2026-57160MEDIUMPJSIP: SIP message header buffer overflowEPSS 0.3%CVE-2026-58374MEDIUMIn hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link Operation (MLO) association request processing EPSS 0.3%CVE-2022-3103HIGHoff-by-one in io_uring module.EPSS 0.3%CVE-2025-37893HIGHLoongArch: BPF: Fix off-by-one error in build_prologue()EPSS 0.3%CVE-2025-52497MEDIUMMbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls_pem_read_buffer and two mbedtls_pk_parse functions,EPSS 0.3%CVE-2026-14899HIGHOff-by-one out of bounds read in MIME header parser for forwardingEPSS 0.3%CVE-2022-49365MEDIUMdrm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()EPSS 0.3%CVE-2026-79148CRITICALOff-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially EPSS 0.3%CVE-2026-58380HIGHGimp: gimp: stack buffer overflow in pnmscanner_gettoken()EPSS 0.3%CVE-2026-21870MEDIUMThe BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_stringEPSS 0.3%CVE-2024-53163MEDIUMcrypto: qat/qat_420xx - fix off by one in uof_get_name()EPSS 0.2%CVE-2025-11215MEDIUMOff by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform an out of bounds memory read via a craftEPSS 0.2%CVE-2026-45358MEDIUMImageMagick: Out-of-Bounds Read of a single byte in meta encoderEPSS 0.2%CVE-2024-57990HIGHwifi: mt76: mt7925: fix off by one in mt7925_load_clc()EPSS 0.2%CVE-2024-56663HIGHwifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-oneEPSS 0.2%