CWE-1285: Improper Validation of Specified Index, Position, or Offset in Input
The product receives input that is expected to specify an index, position, or offset into an indexable resource such as a buffer or file, but it does not validate or incorrectly validates that the specified index/position/offset has the required properties.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- samsung exynos 1280, exynos 1330, exynos 1380 +8 more +10 more Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of... 5.5 Medium
- silicon labs z-wave sdk Out-of-bounds read in Z-Wave NCP SPI Handler 5.1 Medium
- eclipse foundation threadx - usbx Out-of-bounds Read via Check-after-use in the USBX HID Report Descriptor Parser 4.9 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 more Luksmeta: missing slot-range validation permits out-of-gap device i/o 6.0 Medium
- godotengine godot engine Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core... 3.6 Low
- devolutions server, mariadb +1 more MariaDB: insufficient validation of binary frm data when opening a table 8.0 High
- mediatek mt6899 firmware, mt6993 firmware, mt8668 firmware +4 more +6 more In apu, there is a possible memory corruption due to improper input validation. This could lead... 8.4 High
- the tcpdump group libpcap OOBR in libpcap before 1.10.7 5.5 Medium
- autodesk installer Denial of Service in Autodesk Installer IPC Channel 5.5 Medium
- ni ni-pal Local Privilege Escalation in NI-PAL 8.5 High
- erweixin ratex ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice) 8.7 High
- google go-attestation Go-Attestation: Hash injection into trusted measurement list via unskipped SignatureHeaderSize vendor bytes in parseEfiSignatureList() 8.9 High
- ni ni-pal Local privilege escalation in NI-PAL 8.4 High
- yhirose cpp-httplib cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding 5.3 Medium
- mongodb c driver Heap memory out of bounds read and crash in C Driver legacy GridFS file reader 6.0 Medium
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 more vm2: Host Process OOM DoS via Buffer.alloc (Timeout Bypass) 7.5 High
- apache thrift, red hat ai inference server, build of apache camel 3.33 for quarkus 3.33.2.sp1 +7 more +9 more Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern 5.3 Medium
- argoproj argo workflows, argo-workflows, red hat openshift ai (rhoai) +2 more Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controller 7.7 High
- uuidjs uuid Duplicate Advisory: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided 3.2 Low
- uuidjs uuid uuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is provided 8.1 High
- apache kafka, red hat openshift serverless, build of apache camel 4 for quarkus 3 +16 more +18 more Apache Kafka: Missing JWT token validation in OAUTHBEARER authentication 9.1 Critical
- messenger softros lan messenger, softros lan messenger +1 more Softros LAN Messenger 9.2 Denial of Service via Log Files Location 6.8 Medium
- pixarra blob studio Blob Studio 2.17 Denial of Service via Malformed Input 6.9 Medium
- pixarra paint studio Paint Studio 2.17 Denial of Service via Malformed Input 6.9 Medium
- jetaudio jetcast server jetCast Server 2.0 Denial of Service via Log Directory 6.8 Medium
- github.com/buger/jsonparser, jsonparser project jsonparser, red hat cluster observability operator 1.5.0 +17 more +19 more Denial of service in github.com/buger/jsonparser 7.5 High
- github.com/jackc/pgproto3/v2, jackc pgproto3, red hat assisted installer for red hat openshift container platform 2 +26 more +28 more Denial of service in github.com/jackc/pgproto3/v2 7.5 High
- mitsubishi electric corporation electric cnc m800v series m800vw, electric cnc c80 series c80, electric cnc e70 series e70 +15 more +17 more Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series 5.9 Medium
-
libcrux-ml-dsacrates.io libcrux: Panic in Signature Hint Decoding During Verification 8.7 High - google android, mediatek, inc. mediatek chipset +1 more In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to... 6.7 Medium
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 more PostgreSQL missing validation of multibyte character length executes arbitrary code 8.8 High
- google android, mediatek, inc. mediatek chipset +1 more In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead... 6.7 Medium
- google android, mediatek, inc. mediatek chipset +1 more In imgsys, there is a possible out of bounds write due to improper input validation. This could... 7.8 High
- gpsd project gpsd, red hat enterprise linux 10, enterprise linux 10.0 extended update support +1 more +3 more gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers... 9.8 Critical
- amd uprof, μprof +1 more Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary... 5.5 Medium
- amd uprof, μprof +1 more Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers,... 5.5 Medium
- eclipse threadx netx duo, eclipse foundation nextx duo +1 more In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply. With a… 6.3 Medium
- eclipse foundation nextx duo, eclipse threadx netx duo +1 more In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3 security parameters. 6.3 Medium
- python software foundation cpython ZIP64 End of Central Directory (EOCD) Locator record offset not checked 4.3 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi210 +37 more +39 more Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow... 8.8 High
- digilent dasylab Out Of Bounds Write in displ2.dll when parsing a DSB file with Digilent DASYLab 8.5 High
- digilent dasylab Heap-based Buffer Overflow when parsing a DSB file with Digilent DASYLab 8.5 High
- digilent dasylab Out Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLab 8.5 High
- digilent dasylab Out Of Bounds Write to invalid address when parsing a DSB file with Digilent DASYLab 8.5 High
- digilent dasylab Out Of Bounds Write of invalid data when parsing a DSB file with Digilent DASYLab 8.5 High
- digilent dasylab Out Of Bounds Write when parsing a DSB file with Digilent DASYLab 8.5 High
- ni labview Memory Corruption Issue in NI LabVIEW due to improper error handling 8.5 High
- ni labview Missing input check in lvpict.cpp used in NI LabVIEW 8.5 High
- ni labview Out of Bounds Read Vulnerability in NI LabVIEW when building font map 7.3 High
- ni labview Out of Bounds Read Vulnerability in NI LabVIEW when loading fonts 7.3 High
- Show olderLoading…