CWE-129: Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
Also known as out-of-bounds array index, index-out-of-range, array index underflow.
A kind of CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input.
From the CWE List. © The MITRE Corporation.
Newest
- osrg gobgpGoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE7.5 High
- argoproj argo workflows, argo-workflows, red hat openshift ai (rhoai) +2 moreArgo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controller7.7 High
- samsung oneMissing bounds validation for operator could allow out of range operator-code lookup during...5.5 Medium
- smallstep certificates, step-ca +1 moreStep CA affected by an index out of bounds panic in TPM attestation EKU validation3.7 Low
- bytecodealliance wasmtimeWasmtime panics when transcoding misaligned utf-16 strings5.9 Medium
- libraw, red hat enterprise linux 6, enterprise linux 7 +13 more +15 moreA heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of...9.8 Critical
- linux, linux kernel +1 morenet: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check7.8 High
- linux, linux kernel +1 morenet: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check7.8 High
EnhancedLinq.AsyncNuGetEnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory7.5 High- go-gitgo-git: Missing validation decoding Index v4 files leads to panic2.8 Low
- linux, linux kernel +1 morex86/fred: Correct speculative safety in fred_extint()7.8 High
- ellanetworks core, ella core +1 moreElla Core panics on invalid PDU Session IDs in NGAP messages6.5 Medium
- elastic packetbeatImproper Validation of Array Index in Packetbeat Leading to Denial of Service5.7 Medium
github.com/russellhaering/gosaml2Gogosaml2 CBC Padding Panic — Unauthenticated Process Crash8.7 High- htslibHTSlib CRAM reader has out-of-bounds read due to improper validation of input6.9 Medium
- htslibHTSlib CRAM reader has out-of-bounds read due to improper validation of input6.9 Medium
- htslibHTSlib CRAM reader has out-of-bounds reads due to improper validation of input6.9 Medium
- htslibHTSlib CRAM reader has heap buffer overflow due to improper validation of input8.8 High
- htslibHTSlib CRAM reader has heap buffer overflow due to improper validation of input8.8 High
- free5gc chf, free5gc +1 morefree5GC CHF has Out-of-Bounds Slice Access that Leads to DoS7.1 High
- linux, linux kernel +1 morewifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration8.8 High
- linuxfoundation tekton pipelines, tektoncd pipeline +1 moreTekton Pipelines: Controller can panic when setting long resolver names in TaskRun/PipelineRun6.5 Medium
- github.com/buger/jsonparser, jsonparser project jsonparser, red hat cluster observability operator 1.5.0 +17 more +19 moreDenial of service in github.com/buger/jsonparser7.5 High
- github.com/jackc/pgproto3/v2, jackc pgproto3, red hat assisted installer for red hat openshift container platform 2 +26 more +28 moreDenial of service in github.com/jackc/pgproto3/v27.5 High
idunno.AtProtoNuGet,idunno.AtProto.OAuthCallbackNuGet,idunno.BlueskyNuGet +2 moreidunno.Bluesky, idunno.AtProto and idunno.AtProto.OAuthCallback Denial of Service Vulnerability7.5 High- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreGStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability8.8 High
- color iccdeviccDEV has a heap out-of-bounds read in CIccCalculatorFunc::ApplySequence()6.1 Medium
- color iccdeviccDEV has a heap out-of-bounds read in CIccPcsXform::pushXYZConvert()6.1 Medium
- elastic packetbeatImproper Validation of Array Index in Packetbeat Leading to Denial of Service5.7 Medium
- gofiber fiberFiber has a Denial of Service Vulnerability via Route Parameter Overflow5.5 Medium
- free5gc amffree5GC has Array Index Out of Bounds in AMF Leading to Denial of Service6.6 Medium
- linux, linux kernel +1 moreriscv: Sanitize syscall table indexing under speculation7.0 High
- amd radeon™ pro vii, radeon™ vii +1 moreImproper input validation within RAS TA Driver can allow a local attacker to access out-of-bounds...4.6 Medium
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL missing validation of multibyte character length executes arbitrary code8.8 High
- color iccdeviccDEV vulnerable to OOB in CIccXform3DLut::Apply()7.8 High
- cert-managercert-manager-controller DoS via Specially Crafted DNS Response5.9 Medium
- alsa project alsa-libalsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer Overflow4.6 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has a heap-buffer-overflow in urb_select_configuration5.6 Medium
- linux, linux kernel +1 moreclk: samsung: exynos-clkout: Assign .num before accessing .hws7.8 High
- elastic packetbeatImproper Validation of Array Index in Packetbeat Leading to Overflow Buffers6.5 Medium
- elastic metricbeat, kibana +1 moreImproper Input Validation in Metricbeat Leading to Denial of Service6.5 Medium
- linux, linux kernel +1 morewifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc()7.6 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: rose: fix invalid array index in rose_kill_by_device()7.8 High
- qualcomm qam8255p firmware, qam8650p firmware, qam8775p firmware +16 more +18 moreImproper Validation of Array Index in Automotive Linux OS7.8 High
- fontforgeFontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability8.8 High
- fontforgeFontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability8.8 High
- free5gcThe free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session...7.5 High
- taikoxyz taiko-monoTaiko Alethia Pacaya inbox verification pointer corruption8.0 High
- openprinting cupsOpenPrinting CUPS vulnerable to stack based out-of-bound write6.0 Medium
- automated logic gen5 controllers, webctrl, carrier i-vu +2 moreALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range8.8 High
- Show moreLoading…