Off-by-one Error

org.apache.tomcat, tomcat-catalina is vulnerable to an Off-by-one Error. The vulnerability is due to rewrite processing restarting at the second rule instead of the first, which allows an attacker to potentially bypass intended rewrite rules or cause unintended request processing...

CVE-2026-101014

A flaw was found in OpenDMARC. An off-by-one boundary error exists in the DMARC Domain-based Message Authentication, Reporting, and Conformance record parser during cleanup operations in the opendmarcutilcleanup function. A remote attacker could exploit this vulnerability by submitting specially...

librenswan: IKEv2 Denial of Service via malformed fragmentation

A flaw was found in Libreswan's IKEv2 fragment reassembly mechanism. When a VPN gateway processes incoming split network packets fragments containing unexpected data, an off-by-one boundary validation error triggers an internal program safety check assertion failure. A remote, unauthenticated...

PT-2026-99806

Name of the Vulnerable Software and Affected Versions OpenDMARC versions prior to 1.4.3 Description A remote attack can be initiated against the DMARC Record Parser component. The issue resides in the opendmarc util cleanup function within the libopendmarc/opendmarc util.c library, where a...

PT-2026-99730

Name of the Vulnerable Software and Affected Versions OpenDKIM versions prior to 2.11.1 Description A remote off-by-one error exists in the Decoder component within the dkim qp decode function of the util.c file. An off-by-one error occurs when a program writes one byte past the end of the buffer...

CVE-2026-79148

A flaw was found in DevTools in Google Chrome. An off-by-one error exists that a remote attacker could exploit by leveraging social engineering to persuade a user to install a malicious Chrome extension. This vulnerability could potentially allow the attacker to read sensitive memory within the...

Astra Linux – Vulnerability in Chromium

A “off-by-one” error in DevTools in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox through a crafted Chrome extension, using social engineering techniques. Chromium security severity: Low...

K000163397: GnuTLS vulnerability CVE-2026-42015

Security Advisory Description A flaw was found in gnutls. An off-by-one error exists in the PKCS12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS12 bag when appending to a bag that already contains 32 elements. This memory...

[SECURITY] [DLA 4791-1] memcached security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4791-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 23, 2026 https://wiki.debian.org/LTS -...

Debian dla-4791 : memcached - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4791 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4791-1 [email protected]...

CVE-2026-18460

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6...

CVE-2026-18460 Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6...

CVE-2026-18460

An off-by-one error leading to an out-of-bounds write vulnerability exists in the RTI Connext Professional (Core Libraries) . This flaw allows for overflow buffers and affects versions 7.4.0 before 7.7.0.1 and 7.0.0 before 7.3.1.6 . No specific exploitation details or remediation steps are provid...

EUVD-2026-84615

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6...

CVE-2026-18460 Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6...

PT-2026-96890

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 7.0.0 through 7.3.1.5 RTI Connext Professional versions 7.4.0 through 7.7.0 Description An off-by-one error in the Core Libraries leads to an out-of-bounds write, which allows buffer overflows. An off-by-one...

CVE-2026-83600: Off-by-one Error

Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized CHART SLOT value that str2ullencoded passes to pluginsdrrdsetcacheputtoslot in src/plugins.d/pluginsdinternals.h. The accepted slot drives reallocz to request an approximately 16 GiB...

CVE-2026-18460: Off-by-one Error

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6...

PT-2026-94637

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one error exists in the drm/amd/display component. The constant AMDGPU DM MAX DISPLAY INDEX was set to 31, but it was utilized as a count rather than an index. This created a...

PT-2026-94862

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one error exists in the TXF key sanitiser within the iwlwifi module. The function iwl mvm frob txf key iter incorrectly calculates the memset start offset when a full key match...