CWE-129: Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
Also known as out-of-bounds array index, index-out-of-range, array index underflow.
A kind of CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input.
From the CWE List. © The MITRE Corporation.
Newest
- fraunhoferhhi vvdec Fraunhofer HHI VVdeC before 3.2.1 Out-of-Bounds Read via Slice::getRefPic 6.9 Medium
- signalwire freeswitch FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data 8.2 High
- vrpn VRPN through 07.36 Out-of-bounds Write via SENDER_DESCRIPTION/TYPE_DESCRIPTION length index 8.7 High
- esa asn1scc ASN1SCC: Out-of-bounds read via unvalidated character index in ASN.1 string decoders 5.3 Medium
- esa asn1scc ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN) 8.1 High
- samsung exynos 1280, exynos 1330, exynos 1380 +7 more +9 more Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash No score
- quozl netrek-client-cow Netrek-client-cow through 3.3.3 Out-of-Bounds Read via SP_S_MESSAGE Packets 7.1 High
- nvidia slurm NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist... 5.3 Medium
- postgresql psqlodbc psqlODBC does not validate column numbers and row indexes in binding and descriptor functions 7.5 High
- qt Memory corruption vulnerability in QMqttClient impacts Qt MQTT 2.3 Low
- gopacket gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments 5.9 Medium
- mariadb-corporation mariadb-connector-j MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication 5.9 Medium
- watchguard fireware os Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service 7.2 High
- watchguard fireware os Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution 6.1 Medium
- ggml-org llama.cpp llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer 8.5 High
- ggml-org llama.cpp llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs 8.8 High
- tildearrow furnace Furnace through 0.6.8.3 Out-of-Bounds Write via FamiTracker GROOVES Block Import 6.9 Medium
- xerial snappy-java snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite 5.9 Medium
- go-jose Go JOSE: Panic during CBC-HMAC processing 6.9 Medium
- vllm vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS) 6.5 Medium
- rt-labs ab soem Multiple Out-of-Bounds Reads in Frame Processing 7.1 High
- rt-labs ab soem Memory Corruption via FMMU Configuration Table Overflow 6.5 Medium
- vllm vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids 7.1 High
- diegonehab rply RPly through 1.1.4 Out-of-Bounds Function Pointer Index via PLY Header 6.9 Medium
- eclipse foundation keypont - gose JweDirectDecryptorBlock.Decrypt: unchecked _thales_aad length header reachable with forged tag → index-out-of-range / slice-bounds panic and unbounded allocation 6.3 Medium
- velneo vserver Denial of Service via Malformed VATP Packet in Velneo vServer 8.7 High
- hms networks pcan windows can device drivers, peak-system device driver setup +1 more HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index 6.9 Medium
- eclipse foundation threadx - guix Binary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arena 6.8 Medium
- mz automation libiec61850 libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS 7.5 High
- samsung open source vyond Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data... 4.4 Medium
- nasa fprime F´: Unvalidated Port Index in GenericHub 9.3 Critical
- bytecodealliance wasmtime Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via Zero-Length Stream Writes 5.9 Medium
- drakkan sftpgo SFTPGo: Denial of service via malformed SSH channel request 6.5 Medium
- freerdp FreeRDP before 3.32.0 Out-of-Bounds Write via MS-RDPEGT Video Geometry 6.0 Medium
- freerdp FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys() 7.0 High
- canva affinity The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate... 4.5 Medium
- sumatrapdfreader sumatrapdf SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookup 5.7 Medium
- mongodb go driver Application denial of service via missing BSON array length validation in MongoDB Go Driver 8.2 High
- excelize Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml 6.5 Medium
- excelize Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check 6.5 Medium
- excelize Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref 6.5 Medium
- excelize Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics 5.3 Medium
- excelize Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows 7.5 High
- excelize Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic 8.7 High
- vyperlang vyper Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Calls 8.3 High
- moby buildkit Malformed LLB file operation can crash buildkitd 6.9 Medium
- moby buildkit Malformed MergeOp can crash the BuildKit daemon 6.9 Medium
- mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +53 more +55 more In Modem, there is a possible system crash due to a missing bounds check. This could lead to... 5.3 Medium
- nvidia geforce, rtx, quadro, nvs, tesla +2 more NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer... 6.7 Medium
- nvidia geforce, rtx, quadro, nvs, tesla +2 more NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer... 6.7 Medium
- Show olderLoading…