cve.bz

CWE-1285: Improper Validation of Specified Index, Position, or Offset in Input, page 2

Filter

The product receives input that is expected to specify an index, position, or offset into an indexable resource such as a buffer or file, but it does not validate or incorrectly validates that the specified index/position/offset has the required properties.

What the weakness is: CWE-1285 at MITRE. All weaknesses

Ask an AI about CWE-1285

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1285: Improper Validation of Specified Index, Position, or Offset in Input and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1285.html and https://cve.bz/cve/cwe/1285?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.4CVE-2024-10495EPSS 0.2%

    An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user…

  2. 8.4CVE-2024-10494EPSS 0.2%

    An out of bounds read due to improper input validation in HeapObjMapImpl.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially cra…

  3. 6.5CVE-2024-51566EPSS 0.4%

    The NVMe driver queue processing is vulernable to guest-induced infinite loops.

  4. 7.5CVE-2024-51564EPSS 0.5%

    A guest can trigger an infinite loop in the hda audio driver.

  5. 3.3CVE-2024-0123EPSS 0.2%

    NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line tool where an attacker may cause an improper validation in input issue by tricking the user into running nvdisasm on a malicious ELF file. A su…

  6. 8.4CVE-2024-41928EPSS 0.2%

    Malicious software running in a guest VM can exploit the buffer overflow to achieve code execution on the host in the bhyve userspace process, which typically runs as root. Note that bhyve runs in a Capsicum sandbox, so malicious code is c…

  7. 7.8CVE-2024-23612EPSS 0.6%

    An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior ver…

  8. 7.8CVE-2024-23609EPSS 0.6%

    An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior ver…

  9. 7.5CVE-2023-46724EPSS 2.8%

    Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service attack against SSL Ce…

  10. 7.5CVE-2023-39389EPSS 0.4%

    Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability.

  11. 7.5CVE-2023-39388EPSS 0.4%

    Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability.

  12. 6.5CVE-2023-36850EPSS 0.3%

    An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Connectivity Fault Management(CFM) module of Juniper Networks Junos OS on MX Series(except MPC10, MPC11 and LC9600) allows an adjacent attacker on…

  13. 5.3CVE-2023-0859EPSS 0.5%

    Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier s…

  14. 7.5CVE-2022-22223EPSS 0.9%

    On QFX10000 Series devices using Juniper Networks Junos OS when configured as transit IP/MPLS penultimate hop popping (PHP) nodes with link aggregation group (LAG) interfaces, an Improper Validation of Specified Index, Position, or Offset …

  15. 7.5CVE-2022-22201EPSS 0.7%

    An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). O…

  16. 5.3CVE-2022-36363EPSS 0.5%

    A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versi…

  17. 7.8CVE-2022-21821EPSS 2.1%

    NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump again…

  18. 7.5CVE-2020-25241EPSS 1.1%

    A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP RST packages. An attacker could exploit…