CWE-129: Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
Also known as out-of-bounds array index, index-out-of-range, array index underflow.
A kind of CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input.
From the CWE List. © The MITRE Corporation.
Newest
- nvidia gpu display driver, cloud gaming, vgpu software (guest driver) - linux, vgpu software (virtual gpu manager), nvidia cloud gaming (guest driver), nvidia cloud gaming (virtual gpu manager) +1 more +3 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, data tampering, or information dis…5.3 Medium
- altair hyperview playerAltair HyperView Player versions 2021.1.0.27 and prior are vulnerable to improper validation of...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, mdm9150 firmware +56 more +58 moreMemory corruption in camera due to improper validation of array index in Snapdragon Auto,...6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 moreMemory corruption in MODEM due to Improper Validation of Array Index while processing GSTK...8.4 High
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs function8.2 High
- freedesktop dbus, fedoraproject fedora +1 moreAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +183 more +185 moreMemory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon...9.8 Critical
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8...8.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8096au firmware, aqt1000 firmware +150 more +152 moreInformation disclosure in WLAN due to improper validation of array index while parsing crafted...7.5 High
- qualcomm, inc. snapdragon auto, qualcomm sa8540p firmware, sa9000p firmware +2 moreMemory corruption in multimedia due to improper validation of array index in Snapdragon Auto8.4 High
- sqlite, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 more`libsqlite3-sys` via C SQLite improperly validates array index7.5 High
- aceattorneyonline akashiMaliciously crafted evidence packet may cause denial of service6.5 Medium
- nvidia dgx a100, dgx a100 firmware +1 moreNVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high...6.4 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm qam8295p firmware, qca6391 firmware +24 more +26 moreMemory corruption in DSP service due to improper validation of input parameters in Snapdragon...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +80 more +82 morePossible buffer overflow due to improper validation of array index while processing external DIAG...7.8 High
- mozilla firefoxIf array shift operations are not used, the Garbage Collector may have become confused about...4.3 Medium
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, msm8953 firmware +42 more +44 moreAn array index is improperly used to lock and unlock a mutex which can lead to a Use After Free...6.7 Medium
- janet-lang janetJanet before 1.22.0 mishandles arrays.7.5 High
- accusoft imagegearAn improper array index validation vulnerability exists in the JPEG-JFIF Scan header parser...9.8 Critical
- accusoft imagegearTwo heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image...9.8 Critical
- radare radare2, radareorg radareorg/radare2 +1 moreImproper Validation of Array Index in radareorg/radare27.6 High
- debian linux, linux kernel, netapp active iq unified manager +7 more +9 moreIn drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is...8.8 High
- sap sapcarSAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive. As a...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ar8031 firmware +157 more +159 morePossible out of bound access of DCI resources due to lack of validation process and resource...6.7 Medium
- teamviewerThis vulnerability allows local attackers to disclose sensitive information on affected...3.3 Low
- oracle mysql, oracle corporation mysql cluster, netapp oncommand insight +1 more +3 moreVulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)....6.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +65 more +67 morePossible heap overflow due to lack of index validation before allocating and writing to heap...7.8 High
- huawei harmonyosThe HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +123 more +125 morePossible out of bound write in RAM partition table due to improper validation on number of...8.4 High
- huawei harmonyosThere is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful...9.1 Critical
- huawei harmonyosThere is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +186 more +188 morePossible buffer overflow due to improper input validation in PDM DIAG command in FTM in...7.8 High
- nvidia gpu display driverWindows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for...4.7 Medium
- oracle mysql cluster, netapp oncommand insight, snapcenter +2 moreVulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)....6.3 Medium
- oracle mysql cluster, netapp oncommand insight, snapcenter +2 moreVulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)....6.3 Medium
- oracle mysql cluster, netapp oncommand insight, snapcenter +2 moreVulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)....6.3 Medium
- microsoft office, 365 apps, 365 apps for enterprise +1 more +3 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +79 more +81 moreUE assertion is possible due to improper validation of invite message with SDP body in Snapdragon...9.8 Critical
- foxit pdf reader, foxitsoftware pdf editor +1 moreAn issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It...9.8 Critical
- tinyobjloader project tinyobjloaderAn improper array index validation vulnerability exists in the LoadObj functionality of...9.6 Critical
- tinyexr project tinyexrtinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage...7.5 High
- tinyexr project tinyexrtinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +119 more +121 moreBuffer overflow in modem due to improper array index check before copying into it in Snapdragon...9.8 Critical
- huawei emui, magic ui +1 moreThere is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful...7.5 High
- accusoft imagegearAn improper array index validation vulnerability exists in the TIF IP_planar_raster_unpack...9.8 Critical
- tp-link tl-sg2005 firmware, tl-sg2008 firmware +1 moreTP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index...8.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +94 more +96 morePossible buffer overflow while updating ikev2 parameters for delete payloads received during...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +323 more +325 morePossible stack out of bound write might happen due to time bitmap length and bit duration fields...9.8 Critical
- huawei emui, magic ui +1 moreThere is an Improper Validation of Array Index vulnerability in Huawei Smartphone. Successful...9.8 Critical
- ffmpegdwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because...8.8 High
- Show moreLoading…