CWE-129: Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
Also known as out-of-bounds array index, index-out-of-range, array index underflow.
A kind of CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 moredrm/amd/display: Check msg_id before processing transcation7.8 High
- linux, linux kernel +1 moredrm/amd/display: Check link_index before accessing dc->links[]7.8 High
- linux, linux kernel +1 moredrm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box7.3 High
- linux, linux kernel +1 moredrm/amd/display: Add array index check for hdcp ddc access7.8 High
- linux, linux kernel +1 morevxlan: Fix nexthop hash size9.8 Critical
- linux, linux kernel +1 morenet: mdio: validate parameter addr in mdiobus_get_phy()7.8 High
- linux, linux kernel +1 moreALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()7.8 High
- linux, linux kernel +1 morenet: atlantic: fix aq_vec index out of range error7.8 High
- linux, linux kernel +1 morebpf: Fix potential array overflow in bpf_trampoline_get_progs()7.8 High
- linux, linux kernel +1 morewifi: mac8021: fix possible oob access in ieee80211_get_rate_duration8.1 High
- linux, linux kernel +1 morertw89: cfo: check mac_id to avoid out-of-bounds8.8 High
- shedaniel roughlyenoughitemsRoughly Enough Items (REI) v.16.0.729 and before contains an Improper Validation of Specified...4.3 Medium
- mezz justenoughitemsJustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index,...4.3 Medium
- emilyploszaj emiEMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index,...4.3 Medium
- linux, linux kernel +1 morenet/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morejfs: Fix array-index-out-of-bounds in diFree7.8 High
- linux, linux kernel +1 morewifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()7.8 High
- linux, linux kernel +1 moredev/parport: fix the array out-of-bounds risk7.8 High
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards, radeon software +2 moreImproper validation of array index in Power Management Firmware (PMFW) may allow a privileged...2.3 Low
- linux, linux kernel +1 morebnx2x: Fix multiple UBSAN array-index-out-of-bounds7.8 High
- linux, linux kernel +1 moredrm/amd/display: Check index msg_id before read or write7.8 High
- linux, linux kernel +1 moredrm/amd/display: Check pipe offset before setting vblank7.8 High
- linux, linux kernel +1 moredrm/amd/display: ASSERT when failing to find index by plane/stream id7.8 High
- linux, linux kernel +1 moregpio: davinci: Validate the obtained number of IRQs7.8 High
- linux, linux kernel +1 moreASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link7.3 High
- linux, linux kernel +1 moredrm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport7.8 High
- linux, linux kernel +1 moreplatform/x86: toshiba_acpi: Fix array out-of-bounds access7.1 High
- schneider electric ecostruxure foxboro dcs core control services, schneider-electric ecostruxure foxboro dcs control core services +1 moreCWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of...7.1 High
- almoghamdani audifyaudify vulnerable to Improper Validation of Array Index7.5 High
- samsung open source walrusImproper Validation of Array Index vulnerability in Samsung Open Source Walrus Webassembly...6.7 Medium
- linux, linux kernel +1 moreclk: bcm: rpi: Assign ->num before accessing ->hws5.5 Medium
- linux, linux kernel +1 moreiio: adc: PAC1934: fix accessing out of bounds array index7.8 High
- linux, linux kernel +1 morefs/ntfs3: Use variable length array instead of fixed size7.8 High
- linux, linux kernel +1 moreisdn: cpai: check ctr->cnr to avoid array index out of bound7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morespeakup: Fix sizeof() vs ARRAY_SIZE() bug7.8 High
- linux, linux kernel +1 moredrivers/perf: hisi_pcie: Fix out-of-bound access when valid event group7.8 High
- linux, linux kernel +1 moredrivers/perf: hisi: hns3: Fix out-of-bound access when valid event group7.8 High
- linux, linux kernel +1 morewifi: nl80211: Avoid address calculations via out of bounds array indexing7.8 High
- linux, linux kernel +1 morenet/mlx5: Add a timeout to acquire the command queue semaphore7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrm/amd/display: Fix potential index out of bounds in color transformation function7.3 High
- linux, linux kernel +1 moreRDMA/mana_ib: boundary check before installing cq callbacks7.8 High
- oneflowAn issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when...7.5 High
- oneflowAn issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when...7.5 High
- linux, linux kernel +1 morewifi: iwlwifi: mvm: guard against invalid STA ID on removal8.8 High
- linux, linux kernel +1 moreppdev: Add an error check in register_device7.8 High
- libiglAn out-of-bounds write vulnerability exists in the readNODE functionality of libigl v2.5.0. A specially crafted .node file can lead to an out-of-bounds write. An attacker can provide a malicious file…7.8 High
- linux, linux kernel +1 moreethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()9.8 Critical
- linux, linux kernel +1 morenet: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound4.4 Medium
- linux, linux kernel +1 moreice: fix locking for Tx timestamp tracking flush7.1 High
- linux, linux kernel +1 moreperf/core: Bail out early if the request AUX area is out of bound7.8 High
- Show moreLoading…