Advisories · Weakness
CWE-129.
Every Advisory and CVE whose sources give the weakness CWE-129, newest first.
- CVSS 4.4 Medium
Improper array index validation in AMD Ryzen™ Threadripper™ 3000 Processors and others
- AMD Ryzen™ Threadripper™ 3000 Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- CWE-129
- CVSS 3.3 Low
Improper array index validation in AMD Radeon™ RX 5000 Series Graphics Products and others
- AMD Radeon™ RX 5000 Series Graphics Products
- AMD Radeon™ PRO W5000 Series Graphics Products
- CWE-129
- CVSS 9.8 CriticalCritical · CVSS 9+
cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restrict…
- Memory corruption
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in Bluetooth HOST
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in DSP Service
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 4.2 Medium
Improper array index validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-129
- CVSS 5.0 Medium
Improper array index validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-129
- CVSS 5.4 Medium
Improper array index validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-129
- CVSS 7.1 High
Improper array index validation in NVIDIA GPU Display Drivers
- NVIDIA GPU Display Drivers
- CWE-129
- CVSS 5.3 Medium
Improper Validation of Array Index in Automotive Autonomy
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 6.8 Medium
Apache Guacamole: Improper input validation of console codes
- Apache Software Foundation Apache Guacamole
- CWE-129
- CVSS 8.6 High
RT-Thread lwp_syscall.c sys_thread_sigprocmask array index
- RT-Thread
- Memory corruption
- CWE-129
- CVSS 8.6 High
RT-Thread lwp_syscall.c sys_sigprocmask array index
- RT-Thread
- Memory corruption
- CWE-129
- CVSS 7.7 High
Fiber panics when fiber.Ctx.BodyParser parses invalid range index
- CWE-129
>=2.52.6, <2.52.7 · fixed in 2.52.7
GHSA-hg3g-gphw-5hhm · CVE-2025-48075 - CVSS 7.5 High
Ollama Server Vulnerable to Denial of Service (DoS) Attack
- CWE-129
<=0.5.11 · no fixed version yet
GHSA-wrh5-cmwx-q2qr · CVE-2025-1975 - CVSS 7.8 High
Improper Validation of Array Index in Camera Driver
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in Camera Driver
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in Camera Driver
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
iio: light: Add check for array bounds in veml6075_read_int_time_ms
- Linux kernel
- CWE-129
- CVSS 7.8 High
objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()
- Linux kernel
- CWE-129
- CVSS 5.5 Medium
clk: samsung: Fix UBSAN panic in samsung_clk_init()
- Linux kernel
- CWE-129
- CVSS 7.8 High
spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock()
- Linux kernel
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in Computer Vision
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in Display
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- Linux kernel
- CWE-129
- CVSS 6.2 Medium
Index out-of-range panic in github.com/onosproject/onos-lib-go
- CWE-129
* · no fixed version yet
GHSA-jrqj-6vq2-7r63 · CVE-2025-30077 - CVSS 7.8 High
ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
- Linux kernel
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in Audio
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in Camera
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
- Linux kernel
- CWE-129
- CVSS 7.8 High
bpf: Fix potential array overflow in bpf_trampoline_get_progs()
- Linux kernel
- CWE-129
- CVSS 7.8 High
media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
- Linux kernel
- CWE-129
- CVSS 8.8 High
rtw89: cfo: check mac_id to avoid out-of-bounds
- Linux kernel
- CWE-129
- CVSS 7.8 High
clk: visconti: prevent array overflow in visconti_clk_register_gates()
- Linux kernel
- CWE-129
- CVSS 7.8 High
net: sched: fix ets qdisc OOB Indexing
- Linux kernel
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in Graphics_Linux
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in Automotive OS Platform
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in Camera
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in Camera
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in Camera
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in Camera Driver
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 9.8 CriticalCritical · CVSS 9+
Improper Validation of Array Index in WLAN Host Communication
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.8 High
pktgen: Avoid out-of-bounds access in get_imix_entries
- Linux kernel
- CWE-129
- CVSS 7.8 High
Improper Validation of Array Index in DSP Services
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 7.1 High
jfs: array-index-out-of-bounds fix in dtReadFirst
- Linux kernel
- CWE-129
- CVSS 7.8 High
jfs: fix array-index-out-of-bounds in jfs_readdir
- Linux kernel
- CWE-129
- CVSS 7.8 High
jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- Linux kernel
- CWE-129
- CVSS 7.8 High
riscv: kvm: Fix out-of-bounds array access
- Linux kernel
- CWE-129
- CVSS 7.8 High
vfio/pci: Properly hide first-in-list PCIe extended capability
- Linux kernel
- CWE-129
- CVSS 7.8 High
wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- Linux kernel
- CWE-129
- CVSS 8.4 High
Improper Validation of Array Index in Hypervisor
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 5.0 Medium
Apache NimBLE: Lack of input sanitization leading to out-of-bound reads in multiple advertisement handler
- Apache Software Foundation Apache NimBLE
- CWE-129
- CVSS 7.8 High
media: dvb-core: add missing buffer index check
- Linux kernel
- CWE-129
- CVSS 7.8 High
bpf: Check the remaining info_cnt before repeating btf fields
- Linux kernel
- CWE-129
- CVSS 4.0, no score published
CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data
- CWE-129
>=0.38.0, <0.38.15 · fixed in 0.38.15
GHSA-p7mv-53f2-4cwj - CVSS 5.1 Medium
Improper array index validation in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-129
- CVSS 6.7 Medium
Improper Validation of Array Index in Camera_Linux
- Qualcomm, Inc. Snapdragon
- CWE-129
- CVSS 4.3 Medium
Roughly Enough Items (REI) v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability.
- CWE-129
- CVSS 4.3 Medium
EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability.
- CWE-129
- CVSS 2.3 Low
Improper array index validation in AMD Radeon™ RX 6000 Series Graphics Cards and others
- AMD Radeon™ RX 6000 Series Graphics Cards
- AMD Radeon™ PRO W6000 Series Graphics Cards
- CWE-129