Off-by-one Error in v2fly/v2ray-core

2022-02-2400:00:52

Google

osv.dev

v2ray-core

off-by-one error

vulnerability

indexing operations

out of bounds

software

EPSS

0.002

Percentile

56.6%

JSON

v2fly/v2ray-core prior to 4.44.0 is vulnerable to an off-by-one error. Indexing operations on arrays, slices, or strings should use an index at most one less than the length. If the index is checked for being less than or equal to the length (<=), instead of less than the length (<), the index could be out of bounds.