CWE-129: Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
Also known as out-of-bounds array index, index-out-of-range, array index underflow.
A kind of CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input.
From the CWE List. © The MITRE Corporation.
Newest
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +18 more +20 morePossible undefined behavior due to lack of size check in function for parameter segment_idx can...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +14 more +16 moreWhen a malformed command is sent to the device programmer, an out-of-bounds access can occur in...7.8 High
- google chromeIncorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a...8.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +12 more +14 moreImproper input validation in TZ led to array out of bound in TZ function while accessing the...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 845 firmware, sd 850 firmware +2 moreA micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary...7.1 High
- golang net, fedoraproject fedora +1 moregolang.org/x/net/html Improper Validation of Array Index vulnerability7.5 High
- golang net, fedoraproject fedora +1 moregolang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer7.5 High
- apple itunes, safari, tvos +4 more +6 moreIn iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7...8.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +33 more +35 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645,...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +33 more +35 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645,...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +37 more +39 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650,...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...8.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn improper update of the WebAssembly dispatch table in WebAssembly in Google Chrome prior to 69...8.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- artifex mupdfIn Artifex MuPDF 1.13.0, the fz_append_byte function in fitz/buffer.c allows remote attackers to...5.5 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...8.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +22 more +24 moreImproper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon...6.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +24 more +26 moreImproper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile,...7.8 High
- ffmpeg, debian linux +1 moreIn FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that...8.8 High
- ethereum go ethereumGo Ethereum LES protocol implementation vulnerable to Denial of Service7.5 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreBuffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreimproper validation of array index in WiFi driver function sapInterferenceRssiCount() leads to...7.8 High
- google androidIn the camera driver, an out-of-bounds access can occur due to an error in copying region params...7.8 High
- giflib project giflib, sam2p project sam2p +1 moreThe DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later...8.8 High
- giflib project giflib, sam2p project sam2p, canonical ubuntu linux +1 more +3 moreThe DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later...8.8 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability...8.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 425 firmware, sd 430 firmware +2 more +4 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 425...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +19 more +21 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +22 more +24 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +25 more +27 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and...9.8 Critical
- qualcomm, inc. snapdragon mobile, qualcomm mdm9615 firmware, mdm9625 firmware +8 more +10 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile...7.5 High
- libreoffice, canonical ubuntu linux, debian linux +3 more +5 moreThe SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4...7.8 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, in the function...7.8 High
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAn issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...8.8 High
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAn issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...8.8 High
- huawei p10 firmware, p10 plus firmware, huawei technologies co., ltd. p10 plus,p10 +2 moreIsub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and...5.5 Medium
- xfig project xfig, debian linux +1 moreAn array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a...7.1 High
- google androidA remote code execution vulnerability in the Android media framework (libhevc). Product: Android....7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, in functions...7.8 High
- google androidA elevation of privilege vulnerability in the Android media framework (libstagefright). Product:...7.8 High
- google android, qualcomm, inc. snapdragon mobile, snapdragon wear +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, an array index...9.8 Critical
- linux kernelThe sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not...7.8 High
- google androidA elevation of privilege vulnerability in the Android media framework (libstagefright). Product:...7.8 High
- Show moreLoading…