CWE-129: Improper Validation of Array Index, page 8
Filter
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
What the weakness is: CWE-129 at MITRE
Ask an AI about CWE-129
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-129: Improper Validation of Array Index and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/129.html and https://cve.bz/cve/cwe/129?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.5CVE-2024-26969EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the e…
- 5.5CVE-2024-26968EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the e…
- 5.5CVE-2024-26967EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to th…
- 5.5CVE-2024-26966EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the …
- 7.5CVE-2024-34050EPSS 0.5%
Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64(b[2])<<16 | uint64(b[1])<<8 | uint64(b[0])" in reader.go.
- 9.8CVE-2024-34048EPSS 0.6%
O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.
- 4.3CVE-2024-34047EPSS 0.3%
O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler.
- 5.5CVE-2023-52728EPSS 0.2%
Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString.
- 9.8CVE-2024-31581EPSS 1.1%
FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c. This vulnerability allows attackers to cause undefined behavior within the application.
- 7.8CVE-2024-26914EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix incorrect mpc_combine array size [why] MAX_SURFACES is per stream, while MAX_PLANES is per asic. The mpc_combine is an array that records all the pl…
- 7.5CVE-2024-23084EPSS 0.6%
Apfloat v1.10.1 was discovered to contain an ArrayIndexOutOfBoundsException via the component org.apfloat.internal.DoubleCRTMath::add(double[], double[]). NOTE: this is disputed by multiple third parties who believe there was not reasonabl…
- 5.5CVE-2024-26758EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: md: Don't ignore suspended array in md_check_recovery() mddev_suspend() never stop sync_thread, hence it doesn't make sense to ignore suspended array in md_check_recover…
- 5.3CVE-2024-26755EPSS 0.7%
In the Linux kernel, the following vulnerability has been resolved: md: Don't suspend the array for interrupted reshape md_start_sync() will suspend the array if there are spares that can be added or removed from conf, however, if reshap…
- 7.1CVE-2023-52640EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix oob in ntfs_listxattr The length of name cannot exceed the space occupied by ea.
- 7.8CVE-2024-26699EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr [Why] There is a potential memory access violation while iterating through array of dcn35 clks. [How] Lim…
- 6.8CVE-2023-51455EPSS 0.2%
A Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to corrupt a controlled memory location due to a missing input validation in the on_rec…
- 5.5CVE-2023-33111EPSS 0.1%
Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.
- 5.4CVE-2024-29231EPSS 0.7%
Improper validation of array index vulnerability in UserPrivilege.Enum webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain non-sensitive information and conduct li…
- 7.8CVE-2024-2214EPSS 0.3%
In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in the Xtensa port was missing an array size check causing a memory overwrite. The affected file was ports/xtensa/xcc/src/tx_clib_lock.c
- 9.1CVE-2024-0901EPSS 0.7%
Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length.
- 7.8CVE-2021-47135EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix possible AOOB issue in mt7921_mcu_tx_rate_report Fix possible array out of bound access in mt7921_mcu_tx_rate_report. Remove unnecessary varibable in m…
- 7.8CVE-2023-52604EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree Syzkaller reported the following issue: UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2867:6 index 196694 is…
- 7.8CVE-2023-52603EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: UBSAN: array-index-out-of-bounds in dtSplitRoot Syzkaller reported the following issue: oop0: detected capacity change from 0 to 32768 UBSAN: array-index-out-of-bounds…
- 7.8CVE-2023-52601EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in dbAdjTree Currently there is a bound check missing in the dbAdjTree while accessing the dmt_stree. To add the required check added …
- 7.8CVE-2023-52599EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diNewExt [Syz report] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_imap.c:2360:2 index -878706688 is out of range for type 'struc…
- 7.8CVE-2023-52594EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() Fix an array-index-out-of-bounds read in ath9k_htc_txstatus(). The bug occurs when txs-…
- 7.8CVE-2021-47065EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: rtw88: Fix array overrun in rtw_get_tx_power_params() Using a kernel with the Undefined Behaviour Sanity Checker (UBSAN) enabled, the following array overrun is logged: …
- 7.8CVE-2021-46984EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: kyber: fix out of bounds access when preempted __blk_mq_sched_bio_merge() gets the ctx and hctx for the current CPU and passes the hctx to ->bio_merge(). kyber_bio_merge…
- 5.5CVE-2020-36776EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/cpufreq_cooling: Fix slab OOB issue Slab OOB issue is scanned by KASAN in cpu_power_to_freq(). If power is limited below the power of OPP0 in EM table, i…
- 7.8CVE-2023-52451EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/memhp: Fix access beyond end of drmem array dlpar_memory_remove_by_index() may access beyond the bounds of the drmem lmb array when the LMB lookup fails …
- 5.3CVE-2024-21493EPSS 0.7%
All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a Caddyfile. Multiple parsing functions in the affected library do not validate whether their input values are…
- 9.8CVE-2024-24563EPSS 1.5%
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can be keyed by a signed integer, while they are defined for unsigned integers only. The typechecker doesn't throw when spotting the usage of an `int` as …
- 7.8CVE-2023-43535EPSS 0.1%
Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger.
- 7.8CVE-2023-39235EPSS 0.4%
Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file …
- 7.8CVE-2023-39234EPSS 0.4%
Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file …
- 7.8CVE-2023-35997EPSS 0.4%
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious…
- 7.8CVE-2023-35996EPSS 0.4%
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious…
- 7.8CVE-2023-35995EPSS 0.4%
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious…
- 7.8CVE-2023-35994EPSS 0.4%
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious…
- 7.8CVE-2023-33053EPSS 0.1%
Memory corruption in Kernel while parsing metadata.
- 6.5CVE-2023-6298EPSS 1.1%
A vulnerability classified as problematic was found in Apryse iText 8.0.2. This vulnerability affects the function main of the file PdfDocument.java. The manipulation leads to improper validation of array index. The attack can be initiated…
- 7.5CVE-2023-46724EPSS 2.8%
Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service attack against SSL Ce…
- 7.8CVE-2023-35126EPSS 0.5%
An out-of-bounds write vulnerability exists within the parsers for both the "DocumentViewStyles" and "DocumentEditStyles" streams of Ichitaro 2023 1.0.1.59372 when processing types 0x0000-0x0009 of a style record with the type 0x2008. A sp…
- 7.8CVE-2023-24850EPSS 0.1%
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
- 7.8CVE-2023-28573EPSS 0.1%
Memory corruption in WLAN HAL while parsing WMI command parameters.
- 7.8CVE-2023-28567EPSS 0.1%
Memory corruption in WLAN HAL while handling command through WMI interfaces.
- 7.8CVE-2023-28565EPSS 0.1%
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
- 7.8CVE-2023-28558EPSS 0.1%
Memory corruption in WLAN handler while processing PhyID in Tx status handler.
- 7.8CVE-2023-28557EPSS 0.1%
Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
- 7.8CVE-2023-28548EPSS 0.1%
Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.