cve.bz

CWE-129: Improper Validation of Array Index, page 5

Filter

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

What the weakness is: CWE-129 at MITRE

Ask an AI about CWE-129

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-129: Improper Validation of Array Index and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/129.html and https://cve.bz/cve/cwe/129?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 4.4CVE-2024-21970EPSS 0.1%

    Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potentially leading to a loss of integrity.

  2. 3.3CVE-2023-31306EPSS 0.1%

    Improper validation of an array index in the AMD graphics driver software could allow an attacker to pass malformed arguments to the dynamic power management (DPM) functions resulting in an out of bounds read and loss of availability.

  3. 7.8CVE-2025-38697EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllocAG, we never check if we are out of bounds realative to the size of the stree. …

  4. 9.8CVE-2025-57052EPSS 0.7%

    cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strin…

  5. 7.8CVE-2025-27075EPSS 0.09%

    Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.

  6. 7.8CVE-2025-27067EPSS 0.09%

    Memory corruption while processing DDI call with invalid buffer.

  7. 5.3CVE-2025-54650EPSS 0.2%

    Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function.

  8. 5.5CVE-2025-54645EPSS 0.09%

    Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.

  9. 5.5CVE-2025-54644EPSS 0.10%

    Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  10. 5.5CVE-2025-54643EPSS 0.1%

    Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  11. 7.5CVE-2025-54610EPSS 0.2%

    Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability.

  12. 7.1CVE-2025-23278EPSS 0.2%

    NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful exploit of this vulnerability might lead to data tamper…

  13. 7.8CVE-2025-38367EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Avoid overflow with array index The variable index is modified and reused as array index when modify register EIOINTC_ENABLE. There will be array index o…

  14. 7.8CVE-2025-38239EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Fix invalid node index On a system with DRAM interleave enabled, out-of-bound access is detected: megaraid_sas 0000:3f:00.0: requested/available msi…

  15. 7.8CVE-2024-53009EPSS 0.10%

    Memory corruption while operating the mailbox in Automotive.

  16. 7.8CVE-2025-38198EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: fbcon: Make sure modelist not set on unregistered console It looks like attempting to write to the "store_modes" sysfs node will run afoul of unregistered consoles: UBS…

  17. 7.8CVE-2025-38146EPSS 0.5%

    In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix the dead loop of MPLS parse The unexpected MPLS packet may not end with the bottom label stack. When there are many stacks, The label count value h…

  18. 7.5CVE-2024-35164EPSS 0.5%

    The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers via text-based protocols like SSH. If a malicious user has access to a text-based connection, a specially-crafted sequ…

  19. 7.8CVE-2022-50066EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix aq_vec index out of range error The final update statement of the for loop exceeds the array range, the dereference of self->aq_vec[i] is not checked …

  20. 7.8CVE-2025-38013EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request Make sure that n_channels is set after allocating the struct cfg80211_registered_device::int…

  21. 8.6CVE-2025-5868EPSS 1.1%

    A vulnerability, which was classified as critical, has been found in RT-Thread 5.1.0. This issue affects the function sys_thread_sigprocmask of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument how leads to …

  22. 8.6CVE-2025-5866EPSS 0.8%

    A vulnerability classified as critical has been found in RT-Thread 5.1.0. This affects the function sys_sigprocmask of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument how leads to improper validation of ar…

  23. 9.8CVE-2025-3357EPSS 1.1%

    IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19 could allow a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamically allocated array.

  24. 7.7CVE-2025-48075EPSS 0.5%

    Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, `fiber.Ctx.BodyParser` can map flat data to nested slices using `key[idx]value` syntax, but when idx is negative, it causes a…

  25. 7.5CVE-2025-1975EPSS 0.5%

    A vulnerability in the Ollama server version 0.5.11 allows a malicious user to cause a Denial of Service (DoS) attack by customizing the manifest content and spoofing a service. This is due to improper validation of array index access when…

  26. 7.8CVE-2024-45578EPSS 0.1%

    Memory corruption while acquire and update IOCTLs during IFE output resource ID validation.

  27. 7.8CVE-2024-45576EPSS 0.1%

    Memory corruption while prociesing command buffer buffer in OPE module.

  28. 7.8CVE-2024-45574EPSS 0.1%

    Memory corruption during array access in Camera kernel due to invalid index from invalid command data.

  29. 7.8CVE-2025-37752EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the …

  30. 7.8CVE-2025-40114EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: iio: light: Add check for array bounds in veml6075_read_int_time_ms The array contains only 5 elements, but the index calculated by veml6075_read_int_time_index can rang…

  31. 7.8CVE-2025-40014EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq() If speed_hz < AMD_SPI_MIN_HZ, amd_set_spi_freq() iterates over the entire amd_spi_freq array with…

  32. 5.5CVE-2025-39728EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fix UBSAN panic in samsung_clk_init() With UBSAN_ARRAY_BOUNDS=y, I'm hitting the below panic due to dereferencing `ctx->clk_data.hws` before setting `ctx->…

  33. 7.8CVE-2025-22067EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock() If requested_clk > 128, cdns_mrvl_xspi_setup_clock() iterates over the entire cdns_mrvl_xspi…

  34. 7.8CVE-2025-21447EPSS 0.1%

    Memory corruption may occur while processing device IO control call for session control.

  35. 7.8CVE-2025-21423EPSS 0.1%

    Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.

  36. 7.8CVE-2025-21991EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes Currently, load_microcode_amd() iterates over all NUMA nodes, retrieves their CPU masks and unco…

  37. 7.8CVE-2023-53019EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobus_get_phy() The caller may pass any value as addr, what may result in an out-of-bounds access to array mdio_map. One existing…

  38. 7.8CVE-2023-53000EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: netlink: prevent potential spectre v1 gadgets Most netlink attributes are parsed and validated from __nla_validate_parse() or validate_nla() u16 type = nla_type(nla…

  39. 7.8CVE-2023-52988EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() snd_hda_get_connections() can return a negative error code. It may lead to accessing 'conn' ar…

  40. 7.8CVE-2023-52987EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write() The "id" comes from the user. Change the type to unsigned to prevent an array underflow.

  41. 6.2CVE-2025-30077EPSS 0.2%

    Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits.

  42. 7.8CVE-2024-53014EPSS 0.1%

    Memory corruption may occur while validating ports and channels in Audio driver.

  43. 7.8CVE-2024-49836EPSS 0.1%

    Memory corruption may occur during the synchronization of the camera`s frame processing pipeline.

  44. 5.5CVE-2024-57996EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The current implementation does not work correctly with a limit of 1. iproute2 actually checks for this and this patch add…

  45. 7.8CVE-2022-49720EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: block: Fix handling of offline queues in blk_mq_alloc_request_hctx() This patch prevents that test nvme/004 triggers the following: UBSAN: array-index-out-of-bounds in …

  46. 7.8CVE-2022-49548EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential array overflow in bpf_trampoline_get_progs() The cnt value in the 'cnt >= BPF_MAX_TRAMP_PROGS' check does not include BPF_TRAMP_MODIFY_RETURN bpf prog…

  47. 7.8CVE-2022-49478EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init Syzbot reported that -1 is used as array index. The problem was in missing validation check. hdw->un…

  48. 7.8CVE-2022-49471EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: rtw89: cfo: check mac_id to avoid out-of-bounds Somehow, hardware reports incorrect mac_id and pollute memory. Check index before we access the array. UBSAN: array-in…

  49. 7.8CVE-2022-49186EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: clk: visconti: prevent array overflow in visconti_clk_register_gates() This code was using -1 to represent that there was no reset function. Unfortunately, the -1 was st…

  50. 7.8CVE-2022-49170EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on curseg->alloc_type As Wenqing Liu reported in bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=215657 - Overview UBSAN: array-inde…