Falhas do tipo CWE-193

151 resultados

Erro de Limite de Fora por Um (Off-by-One)

Um erro de lógica onde um loop, índice de array ou comparação numérica erra por exatamente uma unidade, acessando posição inválida de memória ou pulando uma iteração crítica. Isso causa corrupção de dados, leitura além dos limites ou execução incorreta de lógica sensível.

Exemplo

Um loop que deveria processar 100 elementos (índices 0-99) itera até 100 inclusive, tentando acessar o índice 100 que não existe. Ou um verificador que compara `if (tamanho <= 256)` quando deveria ser `<`, deixando passar um byte além do permitido.

Como mitigar

Use idiomas seguros: iteradores de linguagens modernas (for-each), funções de biblioteca que já tratam limites, e valide explicitamente ranges antes de loops. Em código crítico, teste cases nas bordas (0, 1, tamanho-1, tamanho) e use análise estática que detecta comparações suspeitas.

CVE-2026-115916MEDIUMvLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)EPSS 0.3%CVE-2024-23849MEDIUMIn rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDS_MSG_RX_DGRAM_TRACE_EPSS 0.3%CVE-2026-56790HIGHCANBoat - Off-by-One Global Buffer Overflow in searchForPgn()EPSS 0.3%CVE-2026-100889MEDIUMTrusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-oneEPSS 0.3%CVE-2022-3103HIGHoff-by-one in io_uring module.EPSS 0.3%CVE-2026-58374MEDIUMIn hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link Operation (MLO) association request processing EPSS 0.3%CVE-2025-37893HIGHLoongArch: BPF: Fix off-by-one error in build_prologue()EPSS 0.3%CVE-2026-21870MEDIUMThe BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_stringEPSS 0.3%CVE-2026-114460MEDIUMMod_qos: query truncation during json body merging permits security-rule bypassEPSS 0.3%CVE-2026-14368MEDIUMOff-by-one out-of-bounds NUL write in Zephyr LwM2M JSON string parserEPSS 0.3%CVE-2026-58380HIGHGimp: gimp: stack buffer overflow in pnmscanner_gettoken()EPSS 0.3%CVE-2022-49365MEDIUMdrm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()EPSS 0.3%CVE-2026-116781MEDIUMFreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsingEPSS 0.3%CVE-2025-11215MEDIUMOff by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform an out of bounds memory read via a craftEPSS 0.3%CVE-2024-53163MEDIUMcrypto: qat/qat_420xx - fix off by one in uof_get_name()EPSS 0.2%CVE-2026-45358MEDIUMImageMagick: Out-of-Bounds Read of a single byte in meta encoderEPSS 0.2%CVE-2026-101302MEDIUMRemote DoS via receive-side kernel TLSEPSS 0.2%CVE-2024-57990HIGHwifi: mt76: mt7925: fix off by one in mt7925_load_clc()EPSS 0.2%CVE-2026-2703MEDIUMxlnt-community xlnt Encrypted XLSX File base64.cpp decode_base64 off-by-oneEPSS 0.2%CVE-2026-104033MEDIUMSssd: sssd: access control bypass via improper ldap shadow expiration checkEPSS 0.2%