CWE-129: Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
Also known as out-of-bounds array index, index-out-of-range, array index underflow.
A kind of CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input.
From the CWE List. © The MITRE Corporation.
Newest
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, aqt1000 firmware +331 more +333 moreBuffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size...6.8 Medium
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon mobile, qualcomm aqt1000 firmware, csrb31024 firmware +96 more +98 morePossible memory corruption in BSI module due to improper validation of parameter count in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, aqt1000 firmware +248 more +250 morePossible buffer overflow while updating ikev2 parameters due to lack of check of input validation...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +338 more +340 morePossible out of bounds while accessing global control elements due to race condition in...7.8 High
- golang protobuf, hashicorp consul +1 moreImproper Input Validation in GoGo Protobuf8.6 High
- gjson project gjsonImproper Validation of Array Index in GJSON7.5 High
- golang textIn x/text in Go 1.15.4, a "slice bounds out of range" panic occurs in language...7.5 High
- golang goIn x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage...7.5 High
- tag project tagdhowden tag panic due to out-of-bounds read6.5 Medium
- tag project tagdhowden tag panic due to out-of-bounds read6.5 Medium
- tag project tagdhowden tag panic due to out-of-bounds read6.5 Medium
- tag project tagDenial of Service in dhowden/tag6.5 Medium
- stepmania, xiph.org libvorbis +1 morelib/codebook.c in libvorbis before 1.3.6, as used in StepMania 5.0.12 and other products, has...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8076, aqt1000 +312 more +314 moreOut of bound write while copying data using IOCTL due to lack of check of array index received...7.8 High
- garmin forerunner 235 firmwareGarmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ...9.9 Critical
- garmin forerunner 235 firmwareGarmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ...9.9 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +87 more +89 moreu'When a non standard SIP sigcomp message is received from the network, then there may be chances...9.8 Critical
- qualcomm, inc. snapdragon compute, snapdragon mobile, qualcomm qsm8350 firmware, sc7180 firmware +17 more +19 moreu'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +38 more +40 moreu'Buffer overflow can happen as part of SIP message packet processing while storing values in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +39 more +41 moreu'Buffer overflow occurs while processing SIP message packet due to lack of check of index...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +49 more +51 moreu'Array index underflow issue in adsp driver due to improper check of channel id before used as...7.8 High
- mikrotik routerosAn array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5,...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8096au firmware +38 more +40 moreu'Possible out of bound access while copying the mask file content into the buffer without...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm bitra firmware, ipq6018 firmware +29 more +31 moreu'User Process can potentially corrupt kernel virtual page by passing a crafted page in API' in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, bitra firmware +34 more +36 moreu'Memory can be potentially corrupted if random index is allowed to manipulate TLB entries in...7.8 High
- sized-chunks project sized-chunksUnaligned references in sized-chunks7.5 High
- sized-chunks project sized-chunksMissing release of memory in sized-chunks7.5 High
- sized-chunks project sized-chunksMissing release of memory in sized-chunks7.5 High
- sized-chunks project sized-chunksArray size is not checked in sized-chunks7.5 High
- sized-chunks project sized-chunksArray size is not checked in sized-chunks7.5 High
- sized-chunks project sized-chunksArray size is not checked in sized-chunks7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +67 more +69 moreu'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access...7.8 High
- parallels desktopThis vulnerability allows local attackers to disclose sensitive informations on affected...6.0 Medium
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- parallels desktopThis vulnerability allows local attackers to disclose information on affected installations of...6.5 Medium
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...6.0 Medium
- etcd, fedoraproject fedora +1 moreImproper Input Validation in etcd6.5 Medium
- etcd, fedoraproject fedora +1 moreImproper Input Validation in etcd6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +29 more +31 moreArray out of bound access can occur in display module due to lack of bound check on input parcel...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8096au firmware, apq8098 firmware +28 more +30 morePossible memory corruption in perfservice due to improper validation array length taken from user...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +19 more +21 moreA possible buffer overflow would occur while processing command from firmware due to the group_id...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +35 more +37 morePossible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +38 more +40 moreOut of bound write can happen due to lack of check of array index value while parsing SDP...9.8 Critical
- zephyrproject zephyrInsufficient publish message length validation in MQTT9.0 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +35 more +37 moreArray out of bound may occur while playing mp3 file as no check is there on offset if it is...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +46 more +48 morePossibility of out of bound access while processing the responses from video firmware in...7.8 High
- freerdp, debian linux, opensuse leap +2 moreImproper Validation of Array Index in FreeRDP2.2 Low
- advantech webaccessAdvantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8096au firmware +19 more +21 moreOut of bound write can occur in radio measurement request if STA receives multiple invalid rrm...9.8 Critical
- Show moreLoading…