CWE-129: Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
Also known as out-of-bounds array index, index-out-of-range, array index underflow.
A kind of CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input.
From the CWE List. © The MITRE Corporation.
Newest
- nvidia geforce, rtx, quadro, nvs, tesla +1 more +3 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...7.8 High
- apache software foundation plc4xApache PLC4X, Apache PLC4X, Apache PLC4X, Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from them8.5 High
- apache software foundation plc4xApache PLC4X: Go binding: unbounded allocation and framing failures on wire-controlled lengths8.7 High
- eugeny russhrussh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic3.7 Low
- vllmvLLM before 0.29.0 Denial of Service via out-of-range stop_token_ids7.1 High
- ibm powervm hypervisor, power system e1050 \(9043-mrx\) firmware, power system e1080 \(9080-hex\) firmware +24 more +26 moreThis Power System update is being released to address5.1 Medium
- square wireWire Swift runtime: negative LENGTH_DELIMITED length in skipGroup() crashes any protobuf-decoding service7.5 High
- alsa project alsa-libalsa-lib through 1.2.16.1 Denial of Service via pcm_multi4.8 Medium
- tomwright daselDasel: Selector lexer panics on trailing whitespace in `parseCurRune`6.2 Medium
- temporal technologies, inc. temporalio/tchannel-gotemporalio/tchannel-go zero-chunk call fragment causes process termination8.7 High
- temporal technologies, inc. temporalio/tchannel-gotemporalio/tchannel-go malformed checksum type causes process termination8.7 High
- temporal technologies, inc. server, temporalio/sqlparser +1 moretemporalio/sqlparser malformed MySQL version comments can cause a panic8.7 High
- vllmvLLM through 0.29.0 Cross-Request Logits Corruption via bad_words2.3 Low
- vllmvLLM through 0.29.0 Adjacent-Request Sampler State Corruption via Unvalidated Prompt Token IDs6.3 Medium
- vllmvLLM before 0.29.0 Cross-Request Logits Corruption via allowed_token_ids6.3 Medium
- vllmvLLM before 0.28.0 Denial of Service via negative token ID8.7 High
- hp linux imaging and printing, hp inc. linux imaging and printing software (hplip) +1 moreHP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities5.1 Medium
- tesseract-ocr tesseract, tesseract ocr +1 moreTesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization7.8 High
- google chromeImproper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a...9.6 Critical
- the tcpdump group libpcapOOBR and OOBW in libpcap before 1.10.78.7 High
- teluu pjsip, pjsip pjproject +1 morePJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance8.4 High
- grpc grpc-gogRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers8.7 High
- samsung open source tizenfxOut-of-bounds write in TizenFX MediaBufferBase indexer setter due to missing bounds check6.3 Medium
- amd radeon™ pro v620 graphics productsA malicious virtual function can invoke the certain command handlers in the SMU, causing a denial...3.3 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +7 more +9 moreLibsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data5.5 Medium
- watchguard fireware osFireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution9.3 Critical
- rclonerclone Archive Backend SquashFS Parser Denial of Service7.1 High
- zephyrproject zephyrZephyr virtio driver calls an arbitrary function pointer from an out-of-range used-ring descriptor id8.8 High
- ibm powervm hypervisor, power system e1050 \(9043-mrx\) firmware, power system e1080 \(9080-hex\) firmware +24 more +26 morePower System Improper Validation7.3 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS4.3 Medium
- equinor resdataresdata insufficiently validates untrusted GRDECL files9.8 Critical
- deskflowDeskflow - Unauthenticated server-controlled out-of-bounds read in ServerProxy::setOptions / translateKey modifier-table indexing8.2 High
- capstone-engine capstoneCapstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes5.1 Medium
- rsyncproject rsyncrsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block7.1 High
- timescale timescaledbTimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Index7.1 High
- timescale timescaledbTimescaleDB 2.29.1 Out-of-Bounds Read Information Disclosure via Dictionary Compression Reverse Iterator7.2 High
- academysoftwarefoundation openimageioOpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS5.5 Medium
- academysoftwarefoundation openimageioOpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`5.5 Medium
- pterodactyl wingsWings: Maliciously crafted packet during SFTP connection handshake causes denial of service7.5 High
- linux, linux kernel +1 morePCI/IOV: Skip VF Resizable BAR restore on read error7.0 High
- linux, linux kernel +1 moreusb: typec: tcpm: Validate SVID index in svdm_consume_modes()7.8 High
- linux, linux kernel +1 moreudf: validate free block extents against the partition length7.8 High
- linux, linux kernel +1 moreInput: iforce - bound the device-reported force-feedback effect index7.8 High
- linux, linux kernel +1 moreInput: mms114 - fix touch indexing for MMS134S and MMS1367.8 High
- linux, linux kernel +1 moreInput: touchwin - reset the packet index on every complete packet7.8 High
- fatedier frpfrp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow8.7 High
- eugeny russhRussh: Post-auth remote panic via pty-req with more than 130 terminal-mode records4.3 Medium
- linux, linux kernel +1 moreASoC: codecs: simple-mux: Fix enum control bounds check7.1 High
- linux, linux kernel +1 moreocteontx2-af: CGX: add bounds check to cgx_speed_mbps index7.8 High
- linux, linux kernel +1 morecgroup/rstat: validate cpu before css_rstat_cpu() access7.8 High
- Show moreLoading…