CWE-193 Off-by-one Error

Coraza: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass

ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions

nimiq-blockchain: Validity store off by one error

ImageMagick: Information Disclosure when printing profiles with debug enabled

Gogs Vulnerable to Privilege Escalation via Collaboration Access Mode Validation

ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.

ImageMagick: Out-of-Bounds Read of a single byte in meta encoder

ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix

Velocidex Velociraptor has an off-by-one error

Netfoil has incorrect allowlist enforcement

ImageMagick has has an off-by-one origin validation in allows out-of-bounds read in morphology processing

ImageMagick has an off-by-one error in MSL decoder could result in crash

Moby has an Off-by-one error in its plugin privilege validation

OpenClaw has allowlist exec-guard bypass via env -S

yauzl contains an off-by-one error

GoBGP panics due to a zero value for softwareVersionLen

Envoy affected by off-by-one write in JsonEscaper::escapeString()

ml-dsa's UseHint function has off by two error when r0 equals zero

ImageMagick has a Heap Buffer Overflow in InterpretImageFilename

Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64

wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64

GoBGP does not verify that the input length

incorrect storage layout for contracts containing large arrays

Heap buffer overflow caused by rounding

redis-py Race Condition vulnerability