CWE-129: Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
Also known as out-of-bounds array index, index-out-of-range, array index underflow.
A kind of CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 morenet: mana: validate rx_req_idx to prevent out-of-bounds array access9.3 Critical
- linux, linux kernel +1 moreiio: light: veml6075: add bounds check to veml6075_it_ms index7.1 High
- linux, linux kernel +1 moreiio: adc: ti-ads1298: add bounds check to pga_settings index7.8 High
- helmHelm Files.Lines Denial of Service via Empty Chart Files5.3 Medium
- tencent ncnnncnn: Out-of-bounds heap write in ParamDict::load_param via unchecked negative parameter id7.1 High
- nvidia tensorrtNVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation...7.8 High
- ollamaOllama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability7.5 High
- osrg gobgpGoBGP confederation validation panics on empty AS_PATH attribute5.9 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Cloud Appearance Buffer Overflow Vulnerability7.8 High
- geovision inc. geowebplayerGeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability8.3 High
- geovision inc. geowebplayerGeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability8.3 High
- geovision inc. geowebplayerGeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability8.3 High
- geovision inc. geowebplayerGeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability8.3 High
- geovision inc. geowebplayerGeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability8.3 High
- geovision inc. geowebplayerGeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability8.3 High
- geovision inc. geowebplayerGeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability8.3 High
- geovision inc. geowebplayerGeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability8.3 High
- geovision inc. geowebplayerGeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability8.3 High
- geovision inc. geowebplayerGeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability8.3 High
- geovision inc. geowebplayerGeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability8.3 High
- edgelesssys contrastEdgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer5.3 Medium
- deltaww dvp80es300tDVP80ES300T - Improper Validation of Array Index Vulnerability7.5 High
- rarlab rar, unrar, winrar +1 more +3 moreWinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader7.8 High
- vtkvtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability8.1 High
- schwehr libaislibais 0.15 - Out-of-bounds Vector Access in VdmStream::AddLine via Invalid Sequential Message ID8.7 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreKVM: Reject wrapped offset in kvm_reset_dirty_gfn()7.8 High
- marlinfirmware marlinMarlin Firmware 2.1.2.7 Out-of-Bounds Write via M421 G-code Handler8.3 High
- linux, linux kernel +1 morenetfilter: ip6t_hbh: reject oversized option lists7.1 High
- f5 nginx gateway fabricNGINX Gateway Fabric vulnerability7.1 High
- nvidia dali, data loading library +1 moreNVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper...7.3 High
- qualcomm cq8750m firmware, fastconnect 6700 firmware, fastconnect 6800 firmware +55 more +57 moreImproper Validation of Array Index in Secure Processor8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: b43legacy: enforce bounds check on firmware key index in RX path7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: b43: enforce bounds check on firmware key index in b43_rx()7.8 High
- mapserverMapServer: NULL pointer dereference in SLD `<ElseFilter>` rule parsing reachable via WMS `SLD_BODY`7.5 High
- linux, linux kernel +1 moremtd: intel-dg: Fix accessing regions before setting nregions7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()7.8 High
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/agent +1 moreInvoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent5.3 Medium
- tomwright daselDasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted string6.2 Medium
- square wireWire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service7.5 High
- imagemagickImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.5.1 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define5.7 Medium
- amd radeon™ pro v520, radeon™ pro v620, radeon™ pro w6000 series graphics products +1 more +3 moreImproper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to...6.8 Medium
- sigstore gitsigngitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers5.4 Medium
- linux, linux kernel +1 morewifi: iwlwifi: fix 22000 series SMEM parsing8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: brcmfmac: validate bsscfg indices in IF events8.8 High
- vllmvLLM: Remote DoS via Special-Token Placeholders6.5 Medium
- linuxcontainers incusIncus out-of-bounds panic in snapshot metadata handling allows denial of service7.1 High
- linux, linux kernel +1 moreALSA: ctxfi: Fix missing SPDIFI1 index handling7.8 High
- linux, linux kernel +1 moreiio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only7.8 High
- linux, linux kernel +1 moreusb: typec: ucsi: validate connector number in ucsi_notify_common()7.8 High
- Show moreLoading…