CWE-129

High likelihood

Improper Validation of Array Index

Parent: CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

604 vulnerabilities with CWE-129
CVE-2020-35633 HIGH
CGAL 5.1.1 - Out-of-Bounds Read and Type Confusion via Nef Polygon Parsing
CVSS 8.8
CVE-2020-28589 HIGH
tinyobjloader v2.0-rc1 and development commit 79d4421 - Remote Code Execution via LoadObj Function
CVSS 8.8
CVE-2020-18430 HIGH
tinyexr 0.9.5 - Denial of Service via Array Index Error in DecodeEXRImage
CVSS 7.5
CVE-2020-18428 HIGH
tinyexr 0.9.5 - Denial of Service via Array Index Error in SaveEXR
CVSS 7.5
CVE-2020-11307 CRITICAL
Qualcomm APQ/MSM/QCA/PM Firmware - Buffer Overflow in Modem Array Index Validation
CVSS 9.8
CVE-2020-11291 CRITICAL
Qualcomm APQ8017 Firmware - Buffer Overflow via IKEv2 Delete Payload Parameter Validation
CVSS 9.8
CVE-2020-11134 CRITICAL
Qualcomm Firmware - Stack-Based Buffer Overflow via NAN Management Frame Attribute Validation
CVSS 9.8
CVE-2020-11294 MEDIUM
Qualcomm AR8035 Firmware - Out-of-Bounds Write in Logger via Prefix Size
CVSS 5.9
CVE-2020-11308 MEDIUM
Qualcomm Firmware - Buffer Overflow via ASCII to Unicode String Conversion
CVSS 6.8
CVE-2020-11227 CRITICAL
Qualcomm APQ8009 Firmware - Out-of-Bounds Write via RTT/TTY Packet Parsing
CVSS 9.8
CVE-2020-11226 HIGH
Qualcomm APQ8009 Firmware - Out-of-bounds Read in Data Modem
CVSS 7.5
CVE-2020-25241 HIGH
SIMATIC MV400 Family < 7.0.6 - TCP Session Termination via Invalid RST Sequence Number
CVSS 7.5
CVE-2020-35636 CRITICAL
CGAL - Out-of-bounds Read in Nef Polygon Parser
CVSS 9.8
CVE-2020-35628 CRITICAL
CGAL - Out-of-bounds Read in Nef Polygon Parser
CVSS 9.8
CVE-2020-28636 CRITICAL
CGAL - Out-of-bounds Read in Nef Polygon Parser
CVSS 9.8
CVE-2020-28601 CRITICAL
CGAL - Out-of-bounds Read in Nef Polygon Parser
CVSS 9.8
CVE-2020-11271 HIGH
Qualcomm AQT1000 Firmware - Out-of-Bounds Write via Race Condition in Global Control Elements
CVSS 7.8
CVE-2020-11187 HIGH
Qualcomm Firmware - Memory Corruption in BSI Module via Improper Parameter Count Validation
CVSS 7.8
CVE-2020-11163 CRITICAL
Qualcomm Firmware - Buffer Overflow via IKEv2 Parameter Update
CVSS 9.8
CVE-2020-11146 HIGH
Qualcomm Snapdragon - Out-of-Bounds Write via IOCTL Array Index
CVSS 7.8
CVE-2020-36067 HIGH
gjson <= 1.6.5 - Denial of Service via Crafted GET Call
CVSS 7.5
CVE-2020-28852 HIGH
golang/text < 0.3.5 - Denial of Service via BCP 47 Tag Parsing
CVSS 7.5
CVE-2020-28851 HIGH
GO - Improper Array Index Validation
CVSS 7.5
CVE-2020-29245 MEDIUM
dhowden <2020-11-19 - Info Disclosure
CVSS 6.5
CVE-2020-29244 MEDIUM
dhowden <2020-11-19 - Info Disclosure
CVSS 6.5
Details
Vulnerabilities 604
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits