CWE-1285
Improper Validation of Specified Index, Position, or Offset in Input
The product receives input that is expected to specify an index, position, or offset into an indexable resource such as a buffer or file, but it does not validate or incorrectly validates that the specified index/position/offset has the required properties.
57 vulnerabilities with CWE-1285
CVE-2025-57775
HIGH
Digilent DASYLab - Heap-based Buffer Overflow via DSB File Parsing
CVSS 7.8
CVE-2025-57774
HIGH
Digilent DASYLab - Out-of-Bounds Write via DSB File Parsing
CVSS 7.8
CVE-2025-7849
HIGH
NI LabVIEW <2025 Q1 - Memory Corruption
CVSS 7.8
CVE-2025-7848
HIGH
NI LabVIEW <2025 Q1 - Memory Corruption
CVSS 7.8
CVE-2025-2634
HIGH
NI LabVIEW <2025 Q1 - RCE/Info Disclosure
CVSS 7.8
CVE-2025-2633
HIGH
NI LabVIEW <2025 Q1 - Code Injection
CVSS 7.8
CVE-2025-3755
CRITICAL
Mitsubishi Electric Corporation MELSEC iQ-F Series - DoS
CVSS 9.1
CVE-2025-3357
CRITICAL
IBM Tivoli Monitoring <6.3.0.7-SP19 - RCE
CVSS 9.8
CVE-2024-36342
HIGH
GPU Driver < unknown - Buffer Overflow
CVSS 8.8
CVE-2024-10496
HIGH
NI LabVIEW < 2024 Q3 - Out-of-Bounds Read in BuildFontMap
CVSS 7.8
CVE-2024-10495
HIGH
NI LabVIEW < 2024 Q3 - Out-of-Bounds Read in Font Table Loading
CVSS 7.8
CVE-2024-10494
HIGH
NI LabVIEW < 2024 Q3 - Out-of-Bounds Read in HeapObjMapImpl.cpp
CVSS 7.8
CVE-2024-51566
MEDIUM
FreeBSD 14.1-RELEASE < p6, 13.4-RELEASE < p2, 13.3-RELEASE < p8 - Denial of Service via NVMe Driver Queue Processing
CVSS 6.5
CVE-2024-51564
HIGH
FreeBSD 14.1-RELEASE < p6, 13.4-RELEASE < p2, 13.3-RELEASE < p8 - Denial of Service via HDA Audio Driver Infinite Loop
CVSS 7.5
CVE-2024-0123
LOW
NVIDIA CUDA Toolkit < 12.6.2 - Denial of Service via Malicious ELF File in nvdisasm
CVSS 3.3
CVE-2024-41928
HIGH
FreeBSD 14.0-RELEASE-14.1-RELEASE - Out-of-bounds Read in bhyve
CVSS 8.4
CVE-2024-23612
HIGH
LabVIEW < 2024 Q1 - Remote Code Execution via Crafted VI File
CVSS 7.8
CVE-2024-23609
HIGH
LabVIEW < 2024 Q1 - Remote Code Execution via Crafted VI File
CVSS 7.8
CVE-2023-46724
HIGH
Squid 3.3.0.1-5.9 and < 6.4 - Denial of Service via Crafted SSL Certificate in TLS Handshake
CVSS 8.6
CVE-2023-39389
HIGH
Huawei EMUI and HarmonyOS - Denial of Service in PMS Module
CVSS 7.5
CVE-2023-39388
HIGH
Huawei EMUI and HarmonyOS - Denial of Service in PMS Module
CVSS 7.5
CVE-2023-36850
MEDIUM
Juniper Junos OS - Denial of Service via Malformed CFM Packet
CVSS 6.5
CVE-2023-0859
LOW
Office / Small Office Multifunction Printers and Laser Printers <11...
CVSS 2.2
CVE-2022-22223
MEDIUM
Juniper Junos OS on QFX10000 Series - Denial of Service via Transit IP/MPLS PHP Packets
CVSS 6.5
CVE-2022-22201
HIGH
Juniper Junos OS DoS via Malformed ESP Packet
CVSS 7.5
Details
Vulnerabilities
57