CWE-129

High likelihood

Improper Validation of Array Index

Parent: CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

603 vulnerabilities with CWE-129
CVE-2026-53387 HIGH
iio: light: veml6075: add bounds check to veml6075_it_ms index
CVSS 7.1
CVE-2026-53386 HIGH
iio: adc: ti-ads1298: add bounds check to pga_settings index
CVSS 7.8
CVE-2026-45799 HIGH
Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service
CVSS 7.5
CVE-2026-63308 MEDIUM
Helm Files.Lines Denial of Service via Empty Chart Files
CVSS 4.3
CVE-2026-46377 MEDIUM
Dasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted string
CVSS 6.2
CVE-2026-50144 HIGH
ncnn: Out-of-bounds heap write in ParamDict::load_param via unchecked negative parameter id
CVSS 7.1
CVE-2026-24238 HIGH
Nvidia TensorRT < v1.3.0 rc14 - Improper Validation of Array Index
CVSS 7.8
CVE-2026-15685 HIGH
Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
CVSS 7.5
CVE-2026-57251 HIGH
Foxit PDF Editor/Reader Cloud Appearance Buffer Overflow Vulnerability
CVSS 7.8
CVE-2026-57272 HIGH
GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability
CVSS 8.3
CVE-2026-57271 HIGH
GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability
CVSS 8.3
CVE-2026-57270 HIGH
GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability
CVSS 8.3
CVE-2026-57269 HIGH
GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability
CVSS 8.3
CVE-2026-57268 HIGH
GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability
CVSS 8.3
CVE-2026-57267 HIGH
GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability
CVSS 8.3
CVE-2026-57266 HIGH
GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability
CVSS 8.3
CVE-2026-57265 HIGH
GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability
CVSS 8.3
CVE-2026-57264 HIGH
GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability
CVSS 8.3
CVE-2026-13132 HIGH
GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability
CVSS 8.3
CVE-2026-13131 HIGH
GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability
CVSS 8.3
CVE-2026-14193 HIGH
DVP80ES300T - Improper Validation of Array Index Vulnerability
CVSS 7.5
CVE-2026-14191 HIGH
WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader
CVSS 7.8
CVE-2026-22879 HIGH
Vtk - Improper Validation of Array Index
CVSS 8.1
CVE-2026-56770 HIGH
libais 0.15 - Out-of-bounds Vector Access in VdmStream::AddLine via Invalid Sequential Message ID
CVSS 7.5
CVE-2026-52969 HIGH
KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
CVSS 7.8
Details
Vulnerabilities 603
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits