CWE-129.

ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.

• Memory corruption
• CWE-129

<14.13.1 · fixed in 14.13.1

ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define

• Memory corruption
• CWE-129

<14.13.1 · fixed in 14.13.1

Improper array index validation in AMD Radeon™ RX 6000 Series Graphics Products and others

• AMD Radeon™ RX 6000 Series Graphics Products
• AMD Radeon™ PRO W6000 Series Graphics Products
• CWE-129

gitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers

• CWE-129
• CWE-390

>=0.4.0, <0.15.0 · fixed in 0.15.0

wifi: iwlwifi: fix 22000 series SMEM parsing

• Linux kernel
• CWE-129

wifi: brcmfmac: validate bsscfg indices in IF events

• Linux kernel
• CWE-129

vLLM Vulnerable to Remote DoS via Special-Token Placeholders

• CWE-129

>=0.6.1, <0.20.0 · fixed in 0.20.0

Incus Vulnerable to Panic via Snapshot Bounds Check

• Memory corruption
• CWE-129

<7.0.0 · fixed in 7.0.0

GoBGP has Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE

• CWE-129

<4.3.0 · fixed in 4.3.0

Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller

• CWE-129
• CWE-1285

>=4.0.0, <4.0.5 · fixed in 4.0.5

Improper array index validation in Samsung Open Source ONE

• Samsung Open Source ONE
• CWE-129

Step CA affected by an index out of bounds panic in TPM attestation EKU validation

• CWE-129

>=0.24.0, <0.30.0 · fixed in 0.30.0

Panic when transcoding misaligned component model UTF-16 strings

• CWE-129

>=0.0.0-0, <24.0.7 || >=25.0.0, <36.0.7 || >=37.0.0, <42.0.2 || >=43.0.0, <43.0.1 · fixed in 24.0.7, 36.0.7, 42.0.2, 43.0.1

Improper array index validation in LibRaw

• LibRaw
• Memory corruption
• CWE-129

EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory

• CWE-129
• CWE-1395

>=1.0.0-beta.1, <1.0.0-beta.3 · fixed in 1.0.0-beta.3

go-git missing validation decoding Index v4 files leads to panic

• CWE-129

<5.17.1 · fixed in 5.17.1

Packetbeat does not properly validate an array index in multiple protocol parser components

• CWE-129

<7.0.0-alpha2.0.20260126223743-dec1b31111ec · fixed in 7.0.0-alpha2.0.20260126223743-dec1b31111ec

Ella Core panics on invalid PDU Session IDs in NGAP messages

• CWE-129

<1.6.0 · fixed in 1.6.0

Duplicate Advisory: pgproto3: Negative field length panics in DataRow.Decode

• CWE-129

<=2.3.3 · no fixed version yet

gosaml2 CBC Padding Panic — Unauthenticated Process Crash

• CWE-129

<0.11.0 · fixed in 0.11.0

HTSlib CRAM reader has out-of-bounds read due to improper validation of input

• samtools htslib
• Memory corruption
• CWE-129

HTSlib CRAM reader has out-of-bounds read due to improper validation of input

• samtools htslib
• Memory corruption
• CWE-129

HTSlib CRAM reader has out-of-bounds reads due to improper validation of input

• samtools htslib
• Memory corruption
• CWE-129

HTSlib CRAM reader has heap buffer overflow due to improper validation of input

• samtools htslib
• Memory corruption
• CWE-129

HTSlib CRAM reader has heap buffer overflow due to improper validation of input

• samtools htslib
• Memory corruption
• CWE-129

Out-of-Bounds Slice Access in free5GC CHF Leading to DoS

• CWE-129

<1.2.2 · fixed in 1.2.2

Denial of service in github.com/jackc/pgproto3/v2

• CWE-129
• CWE-1285

>=2.0.0, <=2.3.3 · no fixed version yet

github.com/buger/jsonparser has a denial of service vulnerability

• Memory corruption
• CWE-129

<1.1.2 · fixed in 1.1.2

Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun

• Denial of service
• CWE-129

>=0.60.0, <1.0.1 || >=1.1.0, <1.3.3 || >=1.4.0, <1.6.1 || >=1.7.0, <1.9.2 || >=1.10.0, <1.10.2 · fixed in 1.0.1, 1.3.3, 1.6.1, 1.9.2, 1.10.2

idunno.Bluesky, idunno.AtProto and idunno.AtProto.OAuthCallback Denial of Service Vulnerability

• CWE-129

<1.7.0 · fixed in 1.7.0

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability

• GStreamer
• Memory corruption
• CWE-129

iccDEV has a heap out-of-bounds read in CIccCalculatorFunc::ApplySequence()

• InternationalColorConsortium iccDEV
• Memory corruption
• CWE-129

iccDEV has a heap out-of-bounds read in CIccPcsXform::pushXYZConvert()

• InternationalColorConsortium iccDEV
• Memory corruption
• CWE-129

Improper Validation of Array Index in Packetbeat Leading to Denial of Service

• Elastic Packetbeat
• CWE-129

Fiber has a Denial of Service Vulnerability via Route Parameter Overflow

• CWE-129

<2.52.12 · fixed in 2.52.12

free5GC has Array Index Out of Bounds in AMF Leading to Denial of Service

• free5gc amf
• CWE-129

Improper array index validation in AMD Radeon™ PRO VII and others

• AMD Radeon™ PRO VII
• AMD Radeon™ VII
• CWE-129

PostgreSQL missing validation of multibyte character length executes arbitrary code

• PostgreSQL
• CWE-129
• CWE-1285

iccDEV vulnerable to OOB in CIccXform3DLut::Apply()

• InternationalColorConsortium iccDEV
• Memory corruption
• CWE-129

cert-manager-controller DoS via Specially Crafted DNS Response

• CWE-129
• CWE-704

>=1.18.0, <1.18.5 || >=1.19.0, <1.19.3 · fixed in 1.18.5, 1.19.3

alsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer Overflow

• ALSA Project alsa-lib
• CWE-129

FreeRDP has a heap-buffer-overflow in urb_select_configuration

• FreeRDP
• Memory corruption
• CWE-129

Improper Validation of Array Index in Packetbeat Leading to Overflow Buffers

• Elastic Packetbeat
• CWE-129

Metricbeat affected by multiple denial of service vulnerabilities

• CWE-129

<7.0.0-alpha2.0.20251217054608-6e42552a23ce || >=8.0.0, <8.19.10 || >=9.0.0, <9.1.10 || >=9.2.0, <9.2.4 · fixed in 7.0.0-alpha2.0.20251217054608-6e42552a23ce, 8.19.10, 9.1.10, 9.2.4

Improper Validation of Array Index in Automotive Linux OS

• Qualcomm, Inc. Snapdragon
• CWE-129

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

• FontForge
• CWE-129

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

• FontForge
• CWE-129

The free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session Deletion Requests.

• CWE-129

Taiko Alethia Pacaya inbox verification pointer corruption

• taikoxyz taiko-mono
• CWE-129

OpenPrinting CUPS vulnerable to stack based out-of-bound write

• OpenPrinting cups
• Memory corruption
• CWE-129

ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range

• Automated Logic WebCtrl
• Automated Logic Gen5 Controllers
• CWE-129
• CWE-248

Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_ex_data…

• CWE-129

vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs

• CWE-129

>=0.5.5, <0.11.1 · fixed in 0.11.1

Rsync: Out of bounds array access via negative index

• rsync
• CWE-129

Improper Validation of Array Index in Automotive Software platform based on QNX

• Qualcomm, Inc. Snapdragon
• CWE-129

Improper Validation of Array Index in Audio

• Qualcomm, Inc. Snapdragon
• CWE-129

Improper Validation of Array Index in Multi-Mode Call Processor

• Qualcomm, Inc. Snapdragon
• CWE-129

Improper array index validation in NVIDIA CUDA Toolkit

• NVIDIA CUDA Toolkit
• CWE-129

ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer

• Linux kernel
• CWE-129

net/mlx5: Collect command failures data only for known commands

• Linux kernel
• CWE-129