CWE-129: Improper Validation of Array Index, page 6
Filter
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
What the weakness is: CWE-129 at MITRE
Ask an AI about CWE-129
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-129: Improper Validation of Array Index and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/129.html and https://cve.bz/cve/cwe/129?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.8CVE-2025-21692EPSS 0.6%
In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan <g1042620637@gmail.com> found that ets_class_from_arg() can index an Out-Of-Bound class in ets_class_from_arg() when pa…
- 7.8CVE-2024-49843EPSS 0.1%
Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.
- 7.8CVE-2024-49837EPSS 0.1%
Memory corruption while reading CPU state data during guest VM suspend.
- 7.8CVE-2024-49834EPSS 0.1%
Memory corruption while power-up or power-down sequence of the camera sensor.
- 7.8CVE-2024-49833EPSS 0.1%
Memory corruption can occur in the camera when an invalid CID is used.
- 7.8CVE-2024-49832EPSS 0.1%
Memory corruption in Camera due to unusually high number of nodes passed to AXI port.
- 7.8CVE-2024-45582EPSS 0.1%
Memory corruption while validating number of devices in Camera kernel .
- 9.8CVE-2024-45569EPSS 0.6%
Memory corruption while parsing the ML IE due to invalid frame content.
- 7.8CVE-2025-21680EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: pktgen: Avoid out-of-bounds access in get_imix_entries Passing a sufficient amount of imix entries leads to invalid access to the pkt_dev->imix_entries array because of …
- 7.8CVE-2024-45550EPSS 0.1%
Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls.
- 7.8CVE-2024-56616EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Fix MST sideband message body length check Fix the MST sideband message body length check, which must be at least 1 byte accounting for the message body CRC …
- 7.8CVE-2024-56608EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' An issue was identified in the dcn21_link_encoder_create function where an out-of-bounds access …
- 7.8CVE-2024-56598EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: jfs: array-index-out-of-bounds fix in dtReadFirst The value of stbl can be sometimes out of bounds due to a bad filesystem. Added a check with appopriate return of error…
- 7.8CVE-2024-56596EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in jfs_readdir The stbl might contain some invalid values. Added a check to return error code in that case.
- 7.8CVE-2024-56595EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree When the value of lp is 0 at the beginning of the for loop, it will become negative in the next assign…
- 7.8CVE-2024-53228EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: Fix out-of-bounds array access In kvm_riscv_vcpu_sbi_init() the entry->ext_idx can contain an out-of-bound index. This is used as a special marker for the ba…
- 7.8CVE-2024-53214EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Properly hide first-in-list PCIe extended capability There are cases where a PCIe extended capability should be hidden from the user. For example, an unknown c…
- 7.8CVE-2024-53203EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() The "command" variable can be controlled by the user via debugfs. The worry is that if con_index is…
- 7.8CVE-2024-53156EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() I found the following bug in my fuzzer: UBSAN: array-index-out-of-bounds in drivers/net/wirele…
- 7.8CVE-2024-33044EPSS 0.1%
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
- 5.0CVE-2024-47249EPSS 0.6%
Improper Validation of Array Index vulnerability in Apache NimBLE. Lack of input validation for HCI events from controller could result in out-of-bound memory corruption and crash. This issue requires broken or bogus Bluetooth controller …
- 5.5CVE-2024-50291EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: add missing buffer index check dvb_vb2_expbuf() didn't check if the given buffer index was for a valid buffer. Add this check.
- 5.5CVE-2024-50161EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: bpf: Check the remaining info_cnt before repeating btf fields When trying to repeat the btf fields for array of nested struct, it doesn't check the remaining info_cnt. T…
- 5.5CVE-2024-51517EPSS 0.1%
Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability.
- 6.7CVE-2024-33032EPSS 0.1%
Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.
- 7.8CVE-2022-49022EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration Fix possible out-of-bound access in ieee80211_get_rate_duration routine as reported by the followin…
- 5.5CVE-2022-48979EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix array index out of bound error in DCN32 DML [Why&How] LinkCapacitySupport array is indexed with the number of voltage states and not the number of m…
- 7.1CVE-2022-48967EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Bounds check struct nfc_target arrays While running under CONFIG_FORTIFY_SOURCE=y, syzkaller reported: memcpy: detected field-spanning write (size 129) of s…
- 7.8CVE-2024-50007EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware.…
- 5.5CVE-2024-49970EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Implement bounds check for stream encoder creation in DCN401 'stream_enc_regs' array is an array of dcn10_stream_enc_registers structures. The array is …
- 7.8CVE-2024-49969EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 color transformation This commit addresses a potential index out of bounds issue in the `cm3_helper_translate_curve_to_…
- 7.8CVE-2024-49931EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix array out-of-bound access in SoC stats Currently, the ath12k_soc_dp_stats::hal_reo_error array is defined with a maximum size of DP_REO_DST_RING_MAX. H…
- 7.8CVE-2024-49930EPSS 0.4%
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix array out-of-bound access in SoC stats Currently, the ath11k_soc_dp_stats::hal_reo_error array is defined with a maximum size of DP_REO_DST_RING_MAX. H…
- 7.8CVE-2024-49895EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation This commit addresses a potential index out of bounds issue in the `cm3_helper_tran…
- 7.8CVE-2024-49894EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma hardware format translation Fixes index out of bounds issue in `cm_helper_translate_curve_to_degamma_hw_format` funct…
- 7.8CVE-2024-46871EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX [Why & How] It actually exposes '6' types in enum dmub_notification_type. Not 5. Using smalle…
- 7.8CVE-2024-46859EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses The panasonic laptop code in various places uses the SINF array with index values of 0 - SINF_CUR_B…
- 5.5CVE-2024-46847EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: mm: vmalloc: ensure vmap_block is initialised before adding to queue Commit 8c61291fd850 ("mm: fix incorrect vbq reference in purge_fragmented_block") extended the 'vmap…
- 7.8CVE-2024-46836EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed_udc: validate endpoint index for ast udc We should verify the bound of the array to assure that host may not manipulate the index to point past endpo…
- 7.8CVE-2024-46833EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: net: hns3: void array out of bound when loop tnl_num When query reg inf of SSU, it loops tnl_num times. However, tnl_num comes from hardware and the length of array is a…
- 7.8CVE-2024-46821EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix negative array index read Avoid using the negative values for clk_idex as an index into an array pptable->DpmDescriptor. V2: fix clk_index return check …
- 7.8CVE-2024-46818EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check gpio_id before used as array index [WHY & HOW] GPIO_ID_UNKNOWN (-1) is not a valid value for array index and therefore should be checked in advanc…
- 7.8CVE-2024-46814EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check msg_id before processing transcation [WHY & HOW] HDCP_MESSAGE_ID_INVALID (-1) is not a valid msg_id nor is it a valid array index, and it needs ch…
- 7.8CVE-2024-46813EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check link_index before accessing dc->links[] [WHY & HOW] dc->links[] has max size of MAX_LINKS and NULL is return when trying to access with out-of-bou…
- 7.8CVE-2024-46811EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box [Why] Coverity reports OVERRUN warning. soc.num_states could be 40. But array range o…
- 7.8CVE-2024-46804EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add array index check for hdcp ddc access [Why] Coverity reports OVERRUN warning. Do not check if array index valid. [How] Check msg_id valid and valid…
- 5.3CVE-2024-41565EPSS 0.3%
JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI for Minecraft, which allows in-game it…
- 5.3CVE-2024-41564EPSS 0.3%
EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in EMI mod for Min…
- 5.3CVE-2024-42698EPSS 0.3%
Roughly Enough Items (REI) v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughl…
- 7.8CVE-2022-48883EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to configure an arbitrary number of rx queues when creating an interface via netli…