CWE-129: Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
Also known as out-of-bounds array index, index-out-of-range, array index underflow.
A kind of CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input.
From the CWE List. © The MITRE Corporation.
Newest
- gtkwaveMultiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort...7.8 High
- qualcomm ar8035 firmware, c-v2x 9150 firmware, fastconnect 6700 firmware +84 more +86 moreImproper Validation of Array Index in Audio5.5 Medium
- qualcomm csr8811 firmware, immersive home 214 platform firmware, immersive home 216 platform firmware +115 more +117 moreImproper Validation of Array Index in Kernel8.4 High
- apryse itextApryse iText PdfDocument.java main array index4.3 Medium
- squid-cache squidSQUID-2023:4 Denial of Service in SSL Certificate validation8.6 High
- ichitaro 2023 2023, justsystems ichitaro 2023, easy postcard max +17 more +19 moreAn out-of-bounds write vulnerability exists within the parsers for both the "DocumentViewStyles"...7.8 High
- qualcomm apq5053-aa firmware, apq8017 firmware, apq8037 firmware +204 more +206 moreImproper Validation of Array Index in HLOS7.8 High
- qualcomm 315 5g iot firmware, aqt1000 firmware, ar8035 firmware +197 more +199 moreImproper Validation of Array Index in WLAN HAL7.8 High
- qualcomm 315 5g iot firmware, aqt1000 firmware, ar8031 firmware +289 more +291 moreImproper Validation of Array Index in WLAN HAL7.8 High
- qualcomm 9205 lte firmware, apq8017 firmware, apq8064au firmware +292 more +294 moreImproper Validation of Array Index in WLAN HAL7.8 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +198 more +200 moreImproper Validation of Array Index in WLAN HAL7.8 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +276 more +278 moreImproper Validation of Array Index in WLAN HAL7.8 High
- qualcomm aqt1000 firmware, ar8035 firmware, ar9380 firmware +181 more +183 moreImproper Validation of Array Index in WLAN HAL7.8 High
- qualcomm aqt1000 firmware, qca6390 firmware, qca6391 firmware +49 more +51 moreImproper Validation of Array Index in Linux6.7 Medium
- qualcomm snapdragon w5\+ gen 1 wearable platform firmware, sw5100 firmware, sw5100p firmware +11 more +13 moreImproper Validation of Array Index in Audio8.4 High
- qualcomm 315 5g iot modem firmware, apq5053-aa firmware, aqt1000 firmware +257 more +259 moreImproper validation of array index in WLAN HAL8.4 High
- disintegration imagingCrash when processing crafted TIFF files5.5 Medium
- simonwaldherr zplgfaIndex out of bounds leading to crash5.5 Medium
- rarlab winrarRARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability7.8 High
- qualcomm aqt1000 firmware, csrb31024 firmware, qam8295p firmware +49 more +51 moreImproper Validation of Array Index in GPS HLOS Driver6.7 Medium
- zabbixDuktape 2.6 bug crashes JavaScript putting too many values in valstack.5.9 Medium
- diagonAn access violation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0...5.3 Medium
- schneider electric ecostruxure foxboro dcs control core servicesA CWE-129: Improper Validation of Array Index vulnerability exists that could cause local...7.0 High
- libreoffice, debian linux +1 moreArray Index UnderFlow in Calc Formula Parsing7.8 High
- qualcomm sm8450 firmware, wcd9380 firmware, wcn685x-1 firmware +6 more +8 moreImproper validation of array index in computer vision.6.7 Medium
- bluezBlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability7.1 High
- schneider electric powerlogic hdpm6000, schneider-electric powerlogic hdpm6000 firmware +1 moreA CWE-129: Improper validation of an array index vulnerability exists where a specially...9.8 Critical
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: udmabuf: improper validation of array index leading to local privilege escalation8.2 High
- lexmark cslbl firmware, cslbn firmware, csnzj firmware +23 more +25 moreCertain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.9.8 Critical
- qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +223 more +225 moreImproper validation of array index in User Identity Module6.8 Medium
- qualcomm 315 5g iot modem firmware, 7wcn785x-1 firmware, 8905 firmware +269 more +271 moreImproper validation of array index in Modem6.8 Medium
- admesh, slic3r libslic3r +1 moreADMesh improper array index validation6.5 Medium
- cisco ios, ios xe +1 moreCisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability8.6 High
- qualcomm qam8295p firmware, qca6574au firmware, qca6696 firmware +23 more +25 moreImproper Validation of Array Index in Automotive Android OS8.4 High
- qualcomm ar8035 firmware, qca6390 firmware, qca6391 firmware +63 more +65 moreImproper validation of array index in Multi-mode call processor9.8 Critical
- google android, mediatek, inc. mt6580, mt6735, mt6739, mt6761, mt6763, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6885, mt6893, mt6895, mt6983, mt8167, mt8168, mt8666, mt8675 +1 moreIn usb, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +160 more +162 moreImproper Validation of Array Index in Bluetooth HOST7.3 High
- ge digital industrial gateway server, microsoft .net-sdk, ptc kepware kepserverex +10 more +12 moreThe affected products are vulnerable to an improper validation of array index, which could allow...9.8 Critical
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn engineermode services, there is a missing permission check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn engineermode services, there is a missing permission check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn engineermode services, there is a missing permission check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn engineermode services, there is a missing permission check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn engineermode services, there is a missing permission check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn engineermode services, there is a missing permission check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn engineermode services, there is a missing permission check. This could lead to local denial of...5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 5000 Series: Upon processing of a specific SIP packet an FPC can crash7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: PTX10008, PTX10016: When a specific SNMP MIB is queried the FPC will crash7.5 High
- pmmp pocketmine-mpPocketMine-MP before 4.8.1 Server Crash via Banner NBT7.1 High
- qualcomm qam8295p firmware, qca6574au firmware, qca6696 firmware +9 more +11 moreImproper validation of array index in Android Core8.4 High
- nvidia cloud gaming, vgpu software (guest driver) - linux, vgpu software (virtual gpu manager), nvidia cloud gaming (guest driver), nvidia cloud gaming (virtual gpu manager), virtual gpu +2 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, information disclosure, or data ta…5.3 Medium
- Show moreLoading…