Advisories · Weakness
CWE-129.
Every Advisory and CVE whose sources give the weakness CWE-129, newest first.
- CVSS 7.1 High
Improper array index validation in Schneider Electric EcoStruxure Foxboro DCS Core Control Services
- Schneider Electric EcoStruxure Foxboro DCS Core Control Services
- CWE-129
- CVSS 7.5 High
audify vulnerable to Improper Validation of Array Index
- CWE-129
<=1.9.0 · no fixed version yet
GHSA-7vhm-fmph-7wxw · CVE-2024-21522 - CVSS 6.7 Medium
Improper array index validation in Samsung Open Source Walrus
- Samsung Open Source Walrus
- CWE-129
- CVSS 5.3 Medium
Improper Validation of Array Index in github.com/greenpau/caddy-security
- CWE-129
* · no fixed version yet
GHSA-8h95-jcp5-pjpr · CVE-2024-21493 - CVSS 7.8 High
fs/ntfs3: Use variable length array instead of fixed size
- Linux kernel
- CWE-129
- CVSS 7.8 High
wifi: nl80211: Avoid address calculations via out of bounds array indexing
- Linux kernel
- CWE-129
- CVSS 7.8 High
Improper array index validation in libigl
- libigl
- CWE-129
- CVSS 9.8 CriticalCritical · CVSS 9+
ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
- Linux kernel
- CWE-129
- CVSS 7.1 High
ice: fix locking for Tx timestamp tracking flush
- Linux kernel
- CWE-129
- CVSS 7.8 High
jfs: fix array-index-out-of-bounds in diAlloc
- Linux kernel
- CWE-129
- CVSS 7.8 HighCritical · CVSS 7+ and EPSS
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability
- RARLAB WinRAR
- CWE-129
- CVSS 7.1 High
BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability
- BlueZ
- CWE-129
- CVSS 7.5 High
Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64(b[2])<<16 | uint64(b[1])<<8 | uint64(b[0])" in reader.go.
- CWE-129
- CVSS 9.8 CriticalCritical · CVSS 9+
O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.
- CWE-129
- CVSS 5.5 Medium
Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString.
- CWE-129
- CVSS 9.8 CriticalCritical · CVSS 9+
FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c.
- CWE-129
- CVSS 7.5 High
Apfloat v1.10.1 was discovered to contain an ArrayIndexOutOfBoundsException via the component org.apfloat.internal.DoubleCRTMath::add(double[], double[]).
- CWE-129
- CVSS 5.5 Medium
md: Don't ignore suspended array in md_check_recovery()
- Linux kernel
- CWE-129
- CVSS 6.8 Medium
Improper array index validation in DJI Mavic 3 Pro and others
- DJI Mavic 3 Pro
- DJI Mavic 3
- CWE-129
- CVSS 5.5 Medium
Improper Validation of Array Index in Audio
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 5.4 Medium
Improper array index validation in Synology Surveillance Station
- Synology Surveillance Station
- CWE-129
- CVSS 7.0 High
Missing array size check in _Mtxinit() in the Xtensa port
- Eclipse Foundation ThreadX
- CWE-129
- CVSS 7.5 High
SEGV and out of bounds memory read from malicious packet
- wolfSSL
- CWE-129
- CVSS 7.8 High
jfs: fix array-index-out-of-bounds in dbAdjTree
- Linux kernel
- CWE-129
- CVSS 9.8 CriticalCritical · CVSS 9+
Vyper negative array index bounds checks
- CWE-129
<0.4.0 · fixed in 0.4.0
GHSA-52xq-j7v9-v4v2 · CVE-2024-24563 - CVSS 8.4 High
Improper Validation of Array Index in Display
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper array index validation in GTKWave
- GTKWave
- CWE-129
- CVSS 7.8 High
Improper array index validation in GTKWave
- GTKWave
- CWE-129
- CVSS 7.8 High
Improper array index validation in GTKWave
- GTKWave
- CWE-129
- CVSS 7.8 High
Improper array index validation in GTKWave
- GTKWave
- CWE-129
- CVSS 7.8 High
Improper array index validation in GTKWave
- GTKWave
- CWE-129
- CVSS 7.8 High
Improper array index validation in GTKWave
- GTKWave
- CWE-129
- CVSS 8.4 High
Improper Validation of Array Index in Kernel
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 4.3 Medium
Apryse iText PdfDocument.java main array index
- Apryse iText
- CWE-129
- CVSS 8.6 High
SQUID-2023:4 Denial of Service in SSL Certificate validation
- squid
- Memory corruption
- CWE-129
- CVSS 7.8 High
Improper array index validation in Ichitaro 2023
- Ichitaro 2023
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in HLOS
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 5.5 Medium
Index out of bounds leading to crash
- CWE-129
<=1.1.1 · no fixed version yet
GHSA-xgmm-3vvr-6c8j · CVE-2023-36307 -
Crash when processing crafted TIFF files
- CWE-129
<=1.6.2 · no fixed version yet
GHSA-q7pp-wcgr-pffx · CVE-2023-36308 - CVSS 7.8 High
Improper Validation of Array Index in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 6.7 Medium
Improper Validation of Array Index in Linux
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 8.4 High
Improper Validation of Array Index in Audio
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 8.4 High
Improper validation of array index in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 8.8 HighCritical · KEVKEV
Improper array index validation in Apple macOS and others
- Apple macOS
- Apple tvOS
- CWE-129
- CVSS 6.7 Medium
Improper Validation of Array Index in GPS HLOS Driver
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 5.9 Medium
Duktape 2.6 bug crashes JavaScript putting too many values in valstack.
- Zabbix
- CWE-129
- CVSS 7.0 High
Improper array index validation in Schneider Electric EcoStruxure Foxboro DCS Control Core Services
- Schneider Electric EcoStruxure Foxboro DCS Control Core Services
- CWE-129
- CVSS 7.8 High
Array Index UnderFlow in Calc Formula Parsing
- The Document Foundation LibreOffice
- CWE-129
- CVSS 6.7 Medium
Improper validation of array index in computer vision.
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 9.8 CriticalCritical · CVSS 9+
Improper array index validation in Schneider Electric PowerLogic HDPM6000
- Schneider Electric PowerLogic HDPM6000
- CWE-129
- CVSS 8.2 High
Kernel: udmabuf: improper validation of array index leading to local privilege escalation
- Linux kernel
- Red Hat Enterprise Linux 9
- CWE-129
- CVSS 9.8 CriticalCritical · CVSS 9+
Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.
- CWE-129
- CVSS 6.8 Medium
Improper validation of array index in User Identity Module
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 6.8 Medium
Improper validation of array index in Modem
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 8.6 High
Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability
- Cisco IOS
- CWE-129