# CWE-129. Every Advisory and CVE whose sources give the weakness CWE-129, newest first. ## Records, newest first (an older page) - [Improper array index validation in Schneider Electric EcoStruxure Foxboro DCS Core Control Services](https://agentprime.io/advisories/CVE-2024-5680.md) `CVE-2024-5680` · CVE record: Schneider Electric EcoStruxure Foxboro DCS Core Control Services · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-129 - [audify vulnerable to Improper Validation of Array Index](https://agentprime.io/advisories/GHSA-7vhm-fmph-7wxw.md) `GHSA-7vhm-fmph-7wxw`, `CVE-2024-21522` · npm `audify`: affected `<=1.9.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-129 - [Improper array index validation in Samsung Open Source Walrus](https://agentprime.io/advisories/CVE-2024-32673.md) `CVE-2024-32673` · CVE record: Samsung Open Source Walrus · CVSS 6.7 Medium · Not analysed yet · Published 3 Jul 2024 · Tags: CWE-129 - [Improper Validation of Array Index in github.com/greenpau/caddy-security](https://agentprime.io/advisories/GHSA-8h95-jcp5-pjpr.md) `GHSA-8h95-jcp5-pjpr`, `CVE-2024-21493`, `GO-2024-2564` · Go `github.com/greenpau/caddy-security`: affected `*`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 28 Jun 2024 · Tags: CWE-129 - [fs/ntfs3: Use variable length array instead of fixed size](https://agentprime.io/advisories/CVE-2024-38623.md) `CVE-2024-38623` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 21 Jun 2024 · Tags: CWE-129 - [wifi: nl80211: Avoid address calculations via out of bounds array indexing](https://agentprime.io/advisories/CVE-2024-38562.md) `CVE-2024-38562` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 19 Jun 2024 · Tags: CWE-129 - [Improper array index validation in libigl](https://agentprime.io/advisories/CVE-2024-22181.md) `CVE-2024-22181` · CVE record: libigl libigl · CVSS 7.8 High · Not analysed yet · Published 28 May 2024 · Tags: CWE-129 - [ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()](https://agentprime.io/advisories/CVE-2021-47548.md) `CVE-2021-47548` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 May 2024 · Tags: CWE-129 - [ice: fix locking for Tx timestamp tracking flush](https://agentprime.io/advisories/CVE-2021-47449.md) `CVE-2021-47449` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 22 May 2024 · Tags: CWE-129 - [jfs: fix array-index-out-of-bounds in diAlloc](https://agentprime.io/advisories/CVE-2023-52805.md) `CVE-2023-52805` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 21 May 2024 · Tags: CWE-129 - [RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-40477.md) `CVE-2023-40477` · CVE record: RARLAB WinRAR · CVSS 7.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 3 May 2024 · Tags: CWE-129 - [BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-27349.md) `CVE-2023-27349` · CVE record: BlueZ BlueZ · CVSS 7.1 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-129 - [Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64(b\[2\])<<16 | uint64(b\[1\])<<8 | uint64(b\[0\])" in reader.go.](https://agentprime.io/advisories/CVE-2024-34050.md) `CVE-2024-34050` · CVE record · CVSS 7.5 High · Not analysed yet · Published 29 Apr 2024 · Tags: CWE-129 - [O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.](https://agentprime.io/advisories/CVE-2024-34048.md) `CVE-2024-34048` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Apr 2024 · Tags: CWE-129 - [Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString.](https://agentprime.io/advisories/CVE-2023-52728.md) `CVE-2023-52728` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 29 Apr 2024 · Tags: CWE-129 - [FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c.](https://agentprime.io/advisories/CVE-2024-31581.md) `CVE-2024-31581` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Apr 2024 · Tags: CWE-129 - [Apfloat v1.10.1 was discovered to contain an ArrayIndexOutOfBoundsException via the component org.apfloat.internal.DoubleCRTMath::add(double\[\], double\[\]).](https://agentprime.io/advisories/CVE-2024-23084.md) `CVE-2024-23084` · CVE record · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-129 - [md: Don't ignore suspended array in md_check_recovery()](https://agentprime.io/advisories/CVE-2024-26758.md) `CVE-2024-26758` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 3 Apr 2024 · Tags: CWE-129 - [Improper array index validation in DJI Mavic 3 Pro and others](https://agentprime.io/advisories/CVE-2023-51455.md) `CVE-2023-51455` · CVE record: DJI Mavic 3 Pro and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 2 Apr 2024 · Tags: CWE-129 - [Improper Validation of Array Index in Audio](https://agentprime.io/advisories/CVE-2023-33111.md) `CVE-2023-33111` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 5.5 Medium · Not analysed yet · Published 1 Apr 2024 · Tags: CWE-129 - [Improper array index validation in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29231.md) `CVE-2024-29231` · CVE record: Synology Surveillance Station · CVSS 5.4 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: CWE-129 - [Missing array size check in \_Mtxinit() in the Xtensa port](https://agentprime.io/advisories/CVE-2024-2214.md) `CVE-2024-2214` · CVE record: Eclipse Foundation ThreadX · CVSS 7.0 High · Not analysed yet · Published 26 Mar 2024 · Tags: CWE-129 - [SEGV and out of bounds memory read from malicious packet](https://agentprime.io/advisories/CVE-2024-0901.md) `CVE-2024-0901` · CVE record: wolfSSL wolfSSL · CVSS 7.5 High · Not analysed yet · Published 25 Mar 2024 · Tags: CWE-129 - [jfs: fix array-index-out-of-bounds in dbAdjTree](https://agentprime.io/advisories/CVE-2023-52601.md) `CVE-2023-52601` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 Mar 2024 · Tags: CWE-129 - [Vyper negative array index bounds checks](https://agentprime.io/advisories/GHSA-52xq-j7v9-v4v2.md) `GHSA-52xq-j7v9-v4v2`, `CVE-2024-24563`, `PYSEC-2024-150` · PyPI `vyper`: affected `<0.4.0`, fixed in `0.4.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Feb 2024 · Tags: CWE-129 - [Improper Validation of Array Index in Display](https://agentprime.io/advisories/CVE-2023-43535.md) `CVE-2023-43535` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-129 - [Improper array index validation in GTKWave](https://agentprime.io/advisories/CVE-2023-35997.md) `CVE-2023-35997` · CVE record: GTKWave GTKWave · CVSS 7.8 High · Not analysed yet · Published 8 Jan 2024 · Tags: CWE-129 - [Improper array index validation in GTKWave](https://agentprime.io/advisories/CVE-2023-35996.md) `CVE-2023-35996` · CVE record: GTKWave GTKWave · CVSS 7.8 High · Not analysed yet · Published 8 Jan 2024 · Tags: CWE-129 - [Improper array index validation in GTKWave](https://agentprime.io/advisories/CVE-2023-35995.md) `CVE-2023-35995` · CVE record: GTKWave GTKWave · CVSS 7.8 High · Not analysed yet · Published 8 Jan 2024 · Tags: CWE-129 - [Improper array index validation in GTKWave](https://agentprime.io/advisories/CVE-2023-35994.md) `CVE-2023-35994` · CVE record: GTKWave GTKWave · CVSS 7.8 High · Not analysed yet · Published 8 Jan 2024 · Tags: CWE-129 - [Improper array index validation in GTKWave](https://agentprime.io/advisories/CVE-2023-39235.md) `CVE-2023-39235` · CVE record: GTKWave GTKWave · CVSS 7.8 High · Not analysed yet · Published 8 Jan 2024 · Tags: CWE-129 - [Improper array index validation in GTKWave](https://agentprime.io/advisories/CVE-2023-39234.md) `CVE-2023-39234` · CVE record: GTKWave GTKWave · CVSS 7.8 High · Not analysed yet · Published 8 Jan 2024 · Tags: CWE-129 - [Improper Validation of Array Index in Kernel](https://agentprime.io/advisories/CVE-2023-33053.md) `CVE-2023-33053` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-129 - [Apryse iText PdfDocument.java main array index](https://agentprime.io/advisories/CVE-2023-6298.md) `CVE-2023-6298` · CVE record: Apryse iText · CVSS 4.3 Medium · Not analysed yet · Published 26 Nov 2023 · Tags: CWE-129 - [SQUID-2023:4 Denial of Service in SSL Certificate validation](https://agentprime.io/advisories/CVE-2023-46724.md) `CVE-2023-46724` · CVE record: squid-cache squid · CVSS 8.6 High · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption, CWE-129, CWE-786, CWE-823 - [Improper array index validation in Ichitaro 2023](https://agentprime.io/advisories/CVE-2023-35126.md) `CVE-2023-35126` · CVE record: Ichitaro 2023 Ichitaro 2023 · CVSS 7.8 High · Not analysed yet · Published 19 Oct 2023 · Tags: CWE-129 - [Improper Validation of Array Index in HLOS](https://agentprime.io/advisories/CVE-2023-24850.md) `CVE-2023-24850` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 3 Oct 2023 · Tags: CWE-129 - [Index out of bounds leading to crash](https://agentprime.io/advisories/GHSA-xgmm-3vvr-6c8j.md) `GHSA-xgmm-3vvr-6c8j`, `CVE-2023-36307` · Go `simonwaldherr.de/go/zplgfa`: affected `<=1.1.1`, no fixed version yet · CVSS 5.5 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129 - [Crash when processing crafted TIFF files](https://agentprime.io/advisories/GHSA-q7pp-wcgr-pffx.md) `GHSA-q7pp-wcgr-pffx`, `CVE-2023-36308` · Go `github.com/disintegration/imaging`: affected `<=1.6.2`, no fixed version yet · No CVSS score · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129 - [Improper Validation of Array Index in WLAN HAL](https://agentprime.io/advisories/CVE-2023-28573.md) `CVE-2023-28573` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129 - [Improper Validation of Array Index in WLAN HAL](https://agentprime.io/advisories/CVE-2023-28567.md) `CVE-2023-28567` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129 - [Improper Validation of Array Index in WLAN HAL](https://agentprime.io/advisories/CVE-2023-28565.md) `CVE-2023-28565` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129 - [Improper Validation of Array Index in WLAN HAL](https://agentprime.io/advisories/CVE-2023-28558.md) `CVE-2023-28558` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129 - [Improper Validation of Array Index in WLAN HAL](https://agentprime.io/advisories/CVE-2023-28557.md) `CVE-2023-28557` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129 - [Improper Validation of Array Index in WLAN HAL](https://agentprime.io/advisories/CVE-2023-28548.md) `CVE-2023-28548` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129 - [Improper Validation of Array Index in Linux](https://agentprime.io/advisories/CVE-2023-21636.md) `CVE-2023-21636` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129 - [Improper Validation of Array Index in Audio](https://agentprime.io/advisories/CVE-2022-40534.md) `CVE-2022-40534` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129 - [Improper validation of array index in WLAN HAL](https://agentprime.io/advisories/CVE-2022-33275.md) `CVE-2022-33275` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129 - [Improper array index validation in Apple macOS and others](https://agentprime.io/advisories/CVE-2022-48503.md) `CVE-2022-48503` · CVE record: Apple macOS and 4 more · CVSS 8.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 14 Aug 2023 · Tags: CWE-129 - [Improper Validation of Array Index in GPS HLOS Driver](https://agentprime.io/advisories/CVE-2023-21650.md) `CVE-2023-21650` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-129 - [Duktape 2.6 bug crashes JavaScript putting too many values in valstack.](https://agentprime.io/advisories/CVE-2023-29458.md) `CVE-2023-29458` · CVE record: Zabbix Zabbix · CVSS 5.9 Medium · Not analysed yet · Published 13 Jul 2023 · Tags: CWE-129 - [Improper array index validation in Schneider Electric EcoStruxure Foxboro DCS Control Core Services](https://agentprime.io/advisories/CVE-2023-2570.md) `CVE-2023-2570` · CVE record: Schneider Electric EcoStruxure Foxboro DCS Control Core Services · CVSS 7.0 High · Not analysed yet · Published 14 Jun 2023 · Tags: CWE-129 - [Array Index UnderFlow in Calc Formula Parsing](https://agentprime.io/advisories/CVE-2023-0950.md) `CVE-2023-0950` · CVE record: The Document Foundation LibreOffice · CVSS 7.8 High · Not analysed yet · Published 25 May 2023 · Tags: CWE-129 - [Improper validation of array index in computer vision.](https://agentprime.io/advisories/CVE-2022-33281.md) `CVE-2022-33281` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 2 May 2023 · Tags: CWE-129 - [Improper array index validation in Schneider Electric PowerLogic HDPM6000](https://agentprime.io/advisories/CVE-2023-28004.md) `CVE-2023-28004` · CVE record: Schneider Electric PowerLogic HDPM6000 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Apr 2023 · Tags: CWE-129 - [Kernel: udmabuf: improper validation of array index leading to local privilege escalation](https://agentprime.io/advisories/CVE-2023-2008.md) `CVE-2023-2008` · CVE record: Linux kernel and 4 more · CVSS 8.2 High · Not analysed yet · Published 14 Apr 2023 · Tags: CWE-129 - [Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.](https://agentprime.io/advisories/CVE-2023-26066.md) `CVE-2023-26066` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Apr 2023 · Tags: CWE-129 - [Improper validation of array index in User Identity Module](https://agentprime.io/advisories/CVE-2022-33302.md) `CVE-2022-33302` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.8 Medium · Not analysed yet · Published 4 Apr 2023 · Tags: CWE-129 - [Improper validation of array index in Modem](https://agentprime.io/advisories/CVE-2022-33289.md) `CVE-2022-33289` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.8 Medium · Not analysed yet · Published 4 Apr 2023 · Tags: CWE-129 - [Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-20080.md) `CVE-2023-20080` · CVE record: Cisco Cisco IOS · CVSS 8.6 High · Not analysed yet · Published 23 Mar 2023 · Tags: CWE-129 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .