CWE-129: Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
Also known as out-of-bounds array index, index-out-of-range, array index underflow.
A kind of CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input.
From the CWE List. © The MITRE Corporation.
Newest
- google androidA remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android...7.8 High
- linux kernelThe NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type...7.5 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of...7.8 High
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA vulnerability while parsing "application/http-index-format" format content where uninitialized...7.5 High
- xenAn issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x,...8.2 High
- aerospike database serverAn exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle...9.8 Critical
- nvidia corporation windows gpu display driver, nvidia gpu driver +1 moreAll versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- nvidia gpu driver, nvidia corporation quadro, nvs, geforce, grid and tesla +1 moreAll versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- nvidia gpu driver, nvidia corporation quadro, nvs, geforce, grid and tesla +1 moreAll versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- qemu, debian linux, opensuse leap +2 moreThe vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local...4.4 Medium
- librawArray index error in smal_decode_segment function in LibRaw before 0.17.1 allows context...9.8 Critical
- lightdm project lightdmArray index error in LightDM (aka Light Display Manager) 1.14.3, 1.16.x before 1.16.6 when the...5.9 Medium
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreArray index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2,...7.1 High
- python, simplejson project simplejson, opensuse +2 moresimplejson before 2.6.1 vulnerable to array index error5.9 Medium
- linux kernelArray index error in the asihpi_hpi_ioctl function in sound/pci/asihpi/hpioctl.c in the...7.2 High
- freetype, apple iphone os, mac os x +2 more +4 moreArray index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2...6.8 Medium
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreArray index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel...7.2 High
- winpcapMultiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2,...6.9 Medium
- armagetronad armagetron, armagetron advanced +1 moreArmagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to...5.0 Medium
- washington pineInteger signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote...7.5 High