CWE-129: Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
Also known as out-of-bounds array index, index-out-of-range, array index underflow.
A kind of CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input.
From the CWE List. © The MITRE Corporation.
Newest
- libcoapArray index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows...4.3 Medium
- vllmvLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs8.3 High
- rsyncRsync: Out of bounds array access via negative index4.3 Medium
- qualcomm qam8255p firmware, qam8295p firmware, qam8620p firmware +26 more +28 moreImproper Validation of Array Index in Automotive Software platform based on QNX7.8 High
- qualcomm fastconnect 7800 firmware, qcc2072 firmware, wcd9378c firmware +12 more +14 moreImproper Validation of Array Index in Audio7.8 High
- linux, linux kernel +1 morefs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev7.8 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +111 more +113 moreImproper Validation of Array Index in Multi-Mode Call Processor9.8 Critical
- nvidia cuda toolkitNVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause...3.3 Low
- linux, linux kernel +1 morenet/mlx5: Collect command failures data only for known commands7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreKVM: x86: use array_index_nospec with indices that come from guest7.8 High
- linux, linux kernel +1 moreata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS7.8 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +22 more +24 moreImproper validation of an array index in the AND power Management Firmware could allow a...4.4 Medium
- amd radeon™ pro v520 graphics products, radeon™ pro v620 graphics products, radeon™ pro w5000 series graphics products +3 more +5 moreImproper validation of an array index in the AMD graphics driver software could allow an attacker...3.3 Low
- debian linux, linux kernel, siemens simatic cn 4100 +2 morejfs: upper bound check of tree index in dbAllocAG7.8 High
- davegamble cjsoncJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer...9.8 Critical
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +34 more +36 moreImproper Validation of Array Index in Bluetooth HOST7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sc8380xp firmware +6 more +8 moreImproper Validation of Array Index in DSP Service7.8 High
- huawei harmonyosImproper array index verification vulnerability in the audio codec module. Impact: Successful...4.2 Medium
- huawei harmonyosOut-of-bounds array access issue due to insufficient data verification in the location service...5.0 Medium
- huawei emui, harmonyos +1 moreOut-of-bounds array access issue due to insufficient data verification in the kernel ambient...6.6 Medium
- huawei emui, harmonyos +1 moreOut-of-bounds array access issue due to insufficient data verification in the kernel ambient...6.6 Medium
- huawei harmonyosOut-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of...5.4 Medium
- nvidia gpu display driversNVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might...7.1 High
- linux, linux kernel +1 moreLoongArch: KVM: Avoid overflow with array index8.8 High
- debian linux, linux kernel +1 morescsi: megaraid_sas: Fix invalid node index7.3 High
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +187 more +189 moreImproper Validation of Array Index in Automotive Autonomy5.3 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morefbcon: Make sure modelist not set on unregistered console7.8 High
- debian linux, linux kernel +1 morenet: openvswitch: Fix the dead loop of MPLS parse9.4 Critical
- apache guacamoleApache Guacamole: Improper input validation of console codes6.8 Medium
- linux, linux kernel +1 morewifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request7.8 High
- rt-threadRT-Thread lwp_syscall.c sys_thread_sigprocmask array index8.6 High
- rt-threadRT-Thread lwp_syscall.c sys_sigprocmask array index8.6 High
- ibm tivoli monitoringIBM Tivoli Monitoring code execution9.8 Critical
- gofiber fiberFiber panics when fiber.Ctx.BodyParser parses invalid range index7.7 High
- ollama, ollama ollama/ollama +1 moreImproper Validation of Array Index in ollama/ollama7.5 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sdm429w firmware +12 more +14 moreImproper Validation of Array Index in Camera Driver7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sdm429w firmware +17 more +19 moreImproper Validation of Array Index in Camera Driver7.8 High
- qualcomm sdm429w firmware, snapdragon 429 mobile firmware, wcn3620 firmware +2 more +4 moreImproper Validation of Array Index in Camera Driver7.8 High
- debian linux, linux kernel +1 morenet_sched: sch_sfq: move the limit validation7.8 High
- linux, linux kernel +1 moreiio: light: Add check for array bounds in veml6075_read_int_time_ms7.8 High
- linux, linux kernel +1 moreobjtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()7.8 High
- linux, linux kernel +1 moreclk: samsung: Fix UBSAN panic in samsung_clk_init()5.5 Medium
- linux, linux kernel +1 morespi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock()7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sc8380xp firmware +6 more +8 moreImproper Validation of Array Index in Computer Vision7.8 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +43 more +45 moreImproper Validation of Array Index in Display7.8 High
- linux, linux kernel +1 morex86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes7.8 High
- linux, linux kernel +1 morenetlink: prevent potential spectre v1 gadgets7.8 High
- linux, linux kernel +1 moreASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write()7.8 High
- onosproject onos-lib-goonos-lib-go allows an index out-of-range panic6.2 Medium
- qualcomm 215 firmware, 315 5g iot modem firmware, aqt1000 firmware +249 more +251 moreImproper Validation of Array Index in Audio7.8 High
- Show moreLoading…