CWE-129: Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
Also known as out-of-bounds array index, index-out-of-range, array index underflow.
A kind of CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input.
From the CWE List. © The MITRE Corporation.
Newest
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096 firmware +49 more +51 morePossible out of bound array access as there is no check on carrier index passed in Snapdragon...7.8 High
- parallels desktopThis vulnerability allows local attackers to disclose information on affected installations of...6.5 Medium
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- nvidia virtual gpu manager, gpu display driver +1 moreNVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 moreStack overflow can occur when SDP is received with multiple payload types in the FMTP attribute...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm qcs605 firmware, sdm439 firmware +1 more +3 moreOut of bound access while allocating memory for an array in camera due to improper validation of...7.8 High
- qualcomm, inc. snapdragon consumer iot, snapdragon mobile, qualcomm qcs605 firmware, sdm439 firmware +4 more +6 moreOut of bound access due to access of uninitialized memory segment in an array of pointers while...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 moreOut of bound access while parsing dts atom, which is non-standard as it does not have valid...9.8 Critical
- dell unity, emc unity operating environment, emc unity xt operating environment +1 more +3 moreDell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain...7.5 High
- sap netweaverA Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe module in...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8064 firmware, apq8096au firmware +8 more +10 morePossible buffer overflow issue in error processing due to improper validation of array index...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +38 more +40 moreBuffer overflow can occur while processing clip due to lack of check of object size before...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ipq4019 firmware +14 more +16 moreOut of bound access can occur while processing firmware event due to lack of validation of WMI...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ipq4019 firmware +11 more +13 moreOut of bound access occurs while handling the WMI FW event due to lack of check of buffer...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 morePossible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 morePossibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto,...9.8 Critical
- huawei nova 5 firmware, nova 5i pro firmware +1 moreNova 5i pro and Nova 5 smartphones with versions earlier than 9.1.1.190(C00E190R6P2)and Versions...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9205 firmware, qcs404 firmware +13 more +15 moreOut of bound access due to lack of check of whiltelist array size while reading the image elf...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +25 more +27 moreOut-of-bounds access can occur in camera driver due to improper validation of array index in...7.8 High
- nvidia virtual gpu manager, vgpu display driver +1 moreNVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin, in which...4.4 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 moreOut of boundary access due to token received from ADSP and is used without validation as an index...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +48 more +50 moreImproper validation of array index causes OOB write and then leads to memory corruption in MMCP...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +37 more +39 moreOut of bound access due to improper validation of array index cause the index table entry to get...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +46 more +48 morePayload size is not checked before using it as array index in audio in Snapdragon Auto,...7.8 High
- mbedBuffer overflows were discovered in the CoAP library in Arm Mbed OS 5.14.0. The CoAP parser is...9.8 Critical
- ffmpeg, canonical ubuntu linux, debian linux +2 moreFFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array...9.8 Critical
- qualcomm, inc. snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +6 more +8 moreImproper validation of read and write index of tx and rx fifo`s before using for data copy from...7.8 High
- srtalliance secure reliable transportSecure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many...9.8 Critical
- videolan vlc media player, debian linux +1 moreThe xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does...7.8 High
- floragunn search guardSearch Guard versions before 24.0 had an issue that values of string arrays in documents are not...7.5 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, qca8081 firmware +22 more +24 moreFirmware is getting into loop of overwriting memory when scan command is given from host because...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 moreData token is received from ADSP and is used without validation as an index into the array leads...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 moreSanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of...5.5 Medium
- apple icloud, icloud for windows, ios +7 more +9 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- fedoraproject fedora, glyphandcog xpdfreader +1 moreIn Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreOut of bounds read occurs due to improper validation of array while processing VDEV stop response...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +16 more +18 moreBuffer overflow in WLAN driver event handlers due to improper validation of array index in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 moreOut of bounds memory read and access due to improper array index validation may lead to...7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1703 +29 more +31 moreJet Database Engine Remote Code Execution Vulnerability7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +24 more +26 moreImproper input validation on input which is used as an array index will lead to an out of bounds...7.8 High
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +14 more +16 moreWhile iterating through the models contained in a fixed-size array in the actData structure,...7.8 High
- cisco unified communications managerCisco Unified Communications Manager Denial of Service Vulnerability5.3 Medium
- shanda maplestory onlineIn Shanda MapleStory Online V160, the SdoKeyCrypt.sys driver allows privilege escalation to NT...7.8 High
- nvidia gpu driver, nvidia corporation gpu graphics driver +1 moreNVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 moreImproper validation of array index can lead to unauthorized access while processing debugFS in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm msm8996au firmware, qcs605 firmware +28 more +30 moreExceeding the limit of usage entries are not tracked and the information will be lost causing the...5.5 Medium
- sound exchange project exchangeAn issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded,...5.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +33 more +35 moreWhile processing radio connection status change events, Radio index is not properly validated in...7.8 High
- ffmpegFFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in...6.5 Medium
- Show moreLoading…