CWE-129

High likelihood

Improper Validation of Array Index

Parent: CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

572 vulnerabilities with CWE-129
CVE-2023-28558 HIGH
WLAN <Tx Status Handler - Memory Corruption
CVSS 7.8
CVE-2023-28557 HIGH
Qualcomm WLAN HAL - Memory Corruption
CVSS 7.8
CVE-2023-28548 HIGH
Qualcomm WLAN HAL - Memory Corruption
CVSS 7.8
CVE-2023-21636 MEDIUM
Qualcomm AQT1000 Firmware - Memory Corruption via Improper Array Index Validation
CVSS 6.7
CVE-2023-36307 MEDIUM
ZPLGFA 1.1.1 - Denial of Service via Zero-Width Image Processing
CVSS 5.5
CVE-2023-36308 MEDIUM
Disintegration Imaging 1.6.2 - Info Disclosure
CVSS 5.5
CVE-2023-21650 MEDIUM
GPS HLOS Driver - Memory Corruption
CVSS 6.7
CVE-2023-29458 MEDIUM
Zabbix - Denial of Service via Duktape Valstack Overflow
CVSS 5.9
CVE-2023-31194 MEDIUM
Diagon v1.0.139 - Memory Corruption
CVSS 5.3
CVE-2023-2570 HIGH
Schneider Electric EcoStruxure Foxboro DCS Control Core Services - Local DoS and Kernel Execution via IOCTL
CVSS 7.0
CVE-2023-0950 HIGH
LibreOffice 7.4.0-7.4.5 and 7.5.0 - Remote Code Execution via Malformed Spreadsheet Formula
CVSS 7.8
CVE-2023-28004 CRITICAL
PowerLogic HDPM6000 Firmware < 0.58.6 - Denial of Service or Remote Code Execution via Ethernet Request
CVSS 9.8
CVE-2023-2008 HIGH
Linux Kernel < 5.19 - Privilege Escalation via udmabuf Fault Handler Array Index Validation
CVSS 7.8
CVE-2023-26066 CRITICAL
Lexmark <2023-02-19 - Info Disclosure
CVSS 9.8
CVE-2023-20080 HIGH
Cisco IOS - Unauthenticated Denial of Service via DHCPv6 Message Handling
CVSS 8.6
CVE-2023-20633 MEDIUM
Android - Local Privilege Escalation via USB Missing Bounds Check
CVSS 6.7
CVE-2023-0755 CRITICAL
GE Digital Industrial Gateway Server < 7.612 - Remote Code Execution via Array Index Validation
CVSS 9.8
CVE-2023-22408 HIGH
Juniper Junos OS on SRX 5000 Series DoS via Malformed SIP SDP Field
CVSS 7.5
CVE-2023-22401 HIGH
Juniper Networks Junos OS/Junos OS Evolved - DoS
CVSS 7.5
CVE-2022-50315 HIGH
Linux Kernel Array Index Out-of-Bounds in AHCI EM Priv Array
CVSS 7.8
CVE-2022-50066 HIGH
Linux Kernel 4.11-5.19.3 - Out-of-Bounds Array Index in aq_nic_stop
CVSS 7.8
CVE-2022-49720 HIGH
Linux Kernel 4.16-5.10.213, 5.11-5.15.48, 5.16-5.18.5 - Out-of-Bounds Array Index in blk_mq_alloc_request_hctx
CVSS 7.8
CVE-2022-49548 HIGH
Linux Kernel 5.7-5.10.119, 5.11-5.15.44, 5.16-5.17.12, 5.18 - Memory Corruption via BPF Trampoline Array Overflow
CVSS 7.8
CVE-2022-49478 HIGH
Linux kernel - Array Index Out-of-Bounds
CVSS 7.8
CVE-2022-49471 HIGH
Linux Kernel < 5.17.14, 5.16.0-5.16, 5.18.0-5.18.3 - Out-of-Bounds Array Access in rtw89_phy_cfo_parse
CVSS 7.8
Details
Vulnerabilities 572
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits