# CWE-129. Every Advisory and CVE whose sources give the weakness CWE-129, newest first. ## Records, newest first (an older page) - [Improper array index validation in AMD Ryzen™ Threadripper™ 3000 Processors and others](https://agentprime.io/advisories/CVE-2024-21970.md) `CVE-2024-21970` · CVE record: AMD AMD Ryzen™ Threadripper™ 3000 Processors and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 6 Sept 2025 · Tags: CWE-129 - [Improper array index validation in AMD Radeon™ RX 5000 Series Graphics Products and others](https://agentprime.io/advisories/CVE-2023-31306.md) `CVE-2023-31306` · CVE record: AMD AMD Radeon™ RX 5000 Series Graphics Products and 4 more · CVSS 3.3 Low · Not analysed yet · Published 6 Sept 2025 · Tags: CWE-129 - [cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restrict…](https://agentprime.io/advisories/CVE-2025-57052.md) `CVE-2025-57052` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2025 · Tags: Memory corruption, CWE-129 - [Improper Validation of Array Index in Bluetooth HOST](https://agentprime.io/advisories/CVE-2025-27075.md) `CVE-2025-27075` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-129 - [Improper Validation of Array Index in DSP Service](https://agentprime.io/advisories/CVE-2025-27067.md) `CVE-2025-27067` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-129 - [Improper array index validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-54650.md) `CVE-2025-54650` · CVE record: Huawei HarmonyOS · CVSS 4.2 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-129 - [Improper array index validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-54645.md) `CVE-2025-54645` · CVE record: Huawei HarmonyOS · CVSS 5.0 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-129 - [Improper array index validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2025-54610.md) `CVE-2025-54610` · CVE record: Huawei HarmonyOS · CVSS 5.4 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-129 - [Improper array index validation in NVIDIA GPU Display Drivers](https://agentprime.io/advisories/CVE-2025-23278.md) `CVE-2025-23278` · CVE record: NVIDIA GPU Display Drivers · CVSS 7.1 High · Not analysed yet · Published 2 Aug 2025 · Tags: CWE-129 - [Improper Validation of Array Index in Automotive Autonomy](https://agentprime.io/advisories/CVE-2024-53009.md) `CVE-2024-53009` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 5.3 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-129 - [Apache Guacamole: Improper input validation of console codes](https://agentprime.io/advisories/CVE-2024-35164.md) `CVE-2024-35164` · CVE record: Apache Software Foundation Apache Guacamole · CVSS 6.8 Medium · Not analysed yet · Published 2 Jul 2025 · Tags: CWE-129 - [RT-Thread lwp_syscall.c sys_thread_sigprocmask array index](https://agentprime.io/advisories/CVE-2025-5868.md) `CVE-2025-5868` · CVE record: RT-Thread · CVSS 8.6 High · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption, CWE-129 - [RT-Thread lwp_syscall.c sys_sigprocmask array index](https://agentprime.io/advisories/CVE-2025-5866.md) `CVE-2025-5866` · CVE record: RT-Thread · CVSS 8.6 High · Not analysed yet · Published 9 Jun 2025 · Tags: Memory corruption, CWE-129 - [Fiber panics when fiber.Ctx.BodyParser parses invalid range index](https://agentprime.io/advisories/GHSA-hg3g-gphw-5hhm.md) `GHSA-hg3g-gphw-5hhm`, `CVE-2025-48075`, `GO-2025-3706` · Go `github.com/gofiber/fiber/v2`: affected `>=2.52.6, <2.52.7`, fixed in `2.52.7` · CVSS 7.7 High · Not analysed yet · Published 22 May 2025 · Tags: CWE-129 - [Ollama Server Vulnerable to Denial of Service (DoS) Attack](https://agentprime.io/advisories/GHSA-wrh5-cmwx-q2qr.md) `GHSA-wrh5-cmwx-q2qr`, `CVE-2025-1975`, `GO-2025-3695`, `PYSEC-2025-145` · Go `github.com/ollama/ollama`: affected `<=0.5.11`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 16 May 2025 · Tags: CWE-129 - [Improper Validation of Array Index in Camera Driver](https://agentprime.io/advisories/CVE-2024-45578.md) `CVE-2024-45578` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 May 2025 · Tags: CWE-129 - [Improper Validation of Array Index in Camera Driver](https://agentprime.io/advisories/CVE-2024-45576.md) `CVE-2024-45576` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 May 2025 · Tags: CWE-129 - [Improper Validation of Array Index in Camera Driver](https://agentprime.io/advisories/CVE-2024-45574.md) `CVE-2024-45574` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 May 2025 · Tags: CWE-129 - [iio: light: Add check for array bounds in veml6075_read_int_time_ms](https://agentprime.io/advisories/CVE-2025-40114.md) `CVE-2025-40114` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Apr 2025 · Tags: CWE-129 - [objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()](https://agentprime.io/advisories/CVE-2025-40014.md) `CVE-2025-40014` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Apr 2025 · Tags: CWE-129 - [clk: samsung: Fix UBSAN panic in samsung_clk_init()](https://agentprime.io/advisories/CVE-2025-39728.md) `CVE-2025-39728` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 18 Apr 2025 · Tags: CWE-129 - [spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock()](https://agentprime.io/advisories/CVE-2025-22067.md) `CVE-2025-22067` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 16 Apr 2025 · Tags: CWE-129 - [Improper Validation of Array Index in Computer Vision](https://agentprime.io/advisories/CVE-2025-21447.md) `CVE-2025-21447` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 7 Apr 2025 · Tags: CWE-129 - [Improper Validation of Array Index in Display](https://agentprime.io/advisories/CVE-2025-21423.md) `CVE-2025-21423` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 7 Apr 2025 · Tags: CWE-129 - [x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes](https://agentprime.io/advisories/CVE-2025-21991.md) `CVE-2025-21991` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 2 Apr 2025 · Tags: CWE-129 - [Index out-of-range panic in github.com/onosproject/onos-lib-go](https://agentprime.io/advisories/GHSA-jrqj-6vq2-7r63.md) `GHSA-jrqj-6vq2-7r63`, `CVE-2025-30077`, `GO-2025-3526` · Go `github.com/onosproject/onos-lib-go`: affected `*`, no fixed version yet · CVSS 6.2 Medium · Not analysed yet · Published 27 Mar 2025 · Tags: CWE-129 - [ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()](https://agentprime.io/advisories/CVE-2023-52988.md) `CVE-2023-52988` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 27 Mar 2025 · Tags: CWE-129 - [Improper Validation of Array Index in Audio](https://agentprime.io/advisories/CVE-2024-53014.md) `CVE-2024-53014` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 3 Mar 2025 · Tags: CWE-129 - [Improper Validation of Array Index in Camera](https://agentprime.io/advisories/CVE-2024-49836.md) `CVE-2024-49836` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 3 Mar 2025 · Tags: CWE-129 - [block: Fix handling of offline queues in blk_mq_alloc_request_hctx()](https://agentprime.io/advisories/CVE-2022-49720.md) `CVE-2022-49720` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 26 Feb 2025 · Tags: CWE-129 - [bpf: Fix potential array overflow in bpf_trampoline_get_progs()](https://agentprime.io/advisories/CVE-2022-49548.md) `CVE-2022-49548` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 26 Feb 2025 · Tags: CWE-129 - [media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init](https://agentprime.io/advisories/CVE-2022-49478.md) `CVE-2022-49478` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 26 Feb 2025 · Tags: CWE-129 - [rtw89: cfo: check mac_id to avoid out-of-bounds](https://agentprime.io/advisories/CVE-2022-49471.md) `CVE-2022-49471` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 26 Feb 2025 · Tags: CWE-129 - [clk: visconti: prevent array overflow in visconti_clk_register_gates()](https://agentprime.io/advisories/CVE-2022-49186.md) `CVE-2022-49186` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 26 Feb 2025 · Tags: CWE-129 - [net: sched: fix ets qdisc OOB Indexing](https://agentprime.io/advisories/CVE-2025-21692.md) `CVE-2025-21692` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 10 Feb 2025 · Tags: CWE-129 - [Improper Validation of Array Index in Graphics_Linux](https://agentprime.io/advisories/CVE-2024-49843.md) `CVE-2024-49843` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 3 Feb 2025 · Tags: CWE-129 - [Improper Validation of Array Index in Automotive OS Platform](https://agentprime.io/advisories/CVE-2024-49837.md) `CVE-2024-49837` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 3 Feb 2025 · Tags: CWE-129 - [Improper Validation of Array Index in Camera](https://agentprime.io/advisories/CVE-2024-49834.md) `CVE-2024-49834` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 3 Feb 2025 · Tags: CWE-129 - [Improper Validation of Array Index in Camera](https://agentprime.io/advisories/CVE-2024-49833.md) `CVE-2024-49833` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 3 Feb 2025 · Tags: CWE-129 - [Improper Validation of Array Index in Camera](https://agentprime.io/advisories/CVE-2024-49832.md) `CVE-2024-49832` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 3 Feb 2025 · Tags: CWE-129 - [Improper Validation of Array Index in Camera Driver](https://agentprime.io/advisories/CVE-2024-45582.md) `CVE-2024-45582` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 3 Feb 2025 · Tags: CWE-129 - [Improper Validation of Array Index in WLAN Host Communication](https://agentprime.io/advisories/CVE-2024-45569.md) `CVE-2024-45569` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Feb 2025 · Tags: CWE-129 - [pktgen: Avoid out-of-bounds access in get_imix_entries](https://agentprime.io/advisories/CVE-2025-21680.md) `CVE-2025-21680` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 31 Jan 2025 · Tags: CWE-129 - [Improper Validation of Array Index in DSP Services](https://agentprime.io/advisories/CVE-2024-45550.md) `CVE-2024-45550` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Jan 2025 · Tags: CWE-129 - [jfs: array-index-out-of-bounds fix in dtReadFirst](https://agentprime.io/advisories/CVE-2024-56598.md) `CVE-2024-56598` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 27 Dec 2024 · Tags: CWE-129 - [jfs: fix array-index-out-of-bounds in jfs_readdir](https://agentprime.io/advisories/CVE-2024-56596.md) `CVE-2024-56596` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 27 Dec 2024 · Tags: CWE-129 - [jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree](https://agentprime.io/advisories/CVE-2024-56595.md) `CVE-2024-56595` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 27 Dec 2024 · Tags: CWE-129 - [riscv: kvm: Fix out-of-bounds array access](https://agentprime.io/advisories/CVE-2024-53228.md) `CVE-2024-53228` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 27 Dec 2024 · Tags: CWE-129 - [vfio/pci: Properly hide first-in-list PCIe extended capability](https://agentprime.io/advisories/CVE-2024-53214.md) `CVE-2024-53214` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 27 Dec 2024 · Tags: CWE-129 - [wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()](https://agentprime.io/advisories/CVE-2024-53156.md) `CVE-2024-53156` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 24 Dec 2024 · Tags: CWE-129 - [Improper Validation of Array Index in Hypervisor](https://agentprime.io/advisories/CVE-2024-33044.md) `CVE-2024-33044` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 2 Dec 2024 · Tags: CWE-129 - [Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler](https://agentprime.io/advisories/CVE-2024-47249.md) `CVE-2024-47249` · CVE record: Apache Software Foundation Apache NimBLE · CVSS 5.0 Medium · Not analysed yet · Published 26 Nov 2024 · Tags: CWE-129 - [media: dvb-core: add missing buffer index check](https://agentprime.io/advisories/CVE-2024-50291.md) `CVE-2024-50291` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 19 Nov 2024 · Tags: CWE-129 - [bpf: Check the remaining info_cnt before repeating btf fields](https://agentprime.io/advisories/CVE-2024-50161.md) `CVE-2024-50161` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 7 Nov 2024 · Tags: CWE-129 - [CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data](https://agentprime.io/advisories/GHSA-p7mv-53f2-4cwj.md) `GHSA-p7mv-53f2-4cwj`, `GO-2024-3259` · Go `github.com/cometbft/cometbft`: affected `>=0.38.0, <0.38.15`, fixed in `0.38.15` · CVSS 4.0, no score published · Not analysed yet · Published 6 Nov 2024 · Tags: CWE-129 - [Improper array index validation in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-51517.md) `CVE-2024-51517` · CVE record: Huawei HarmonyOS · CVSS 5.1 Medium · Not analysed yet · Published 5 Nov 2024 · Tags: CWE-129 - [Improper Validation of Array Index in Camera_Linux](https://agentprime.io/advisories/CVE-2024-33032.md) `CVE-2024-33032` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 4 Nov 2024 · Tags: CWE-129 - [Roughly Enough Items (REI) v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability.](https://agentprime.io/advisories/CVE-2024-42698.md) `CVE-2024-42698` · CVE record · CVSS 4.3 Medium · Not analysed yet · Published 28 Aug 2024 · Tags: CWE-129 - [EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability.](https://agentprime.io/advisories/CVE-2024-41564.md) `CVE-2024-41564` · CVE record · CVSS 4.3 Medium · Not analysed yet · Published 28 Aug 2024 · Tags: CWE-129 - [Improper array index validation in AMD Radeon™ RX 6000 Series Graphics Cards and others](https://agentprime.io/advisories/CVE-2023-31307.md) `CVE-2023-31307` · CVE record: AMD AMD Radeon™ RX 6000 Series Graphics Cards and 1 more · CVSS 2.3 Low · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-129 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .