CWE-129

High likelihood

Improper Validation of Array Index

Parent: CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

604 vulnerabilities with CWE-129
CVE-2019-5210 HIGH
Nova 5i pro and Nova 5 <9.1.1.190-9.1.1.175 - Code Injection
CVSS 7.8
CVE-2019-2339 HIGH
Snapdragon - Memory Corruption
CVSS 7.8
CVE-2019-10503 HIGH
Qualcomm Snapdragon - Out-of-Bounds Access in Camera Driver
CVSS 7.8
CVE-2019-5698 MEDIUM
NVIDIA Virtual GPU Manager - Denial of Service via vGPU Plugin Array Index Validation
CVSS 4.4
CVE-2019-5692 HIGH
NVIDIA Windows GPU Display Driver - Privilege Escalation or Denial of Service via DxgkDdiEscape Array Index
CVSS 7.8
CVE-2019-2325 CRITICAL
Qualcomm Snapdragon - Out of boundary access
CVSS 9.8
CVE-2019-2258 CRITICAL
Qualcomm Snapdragon - Memory Corruption
CVSS 9.8
CVE-2019-10533 CRITICAL
Qualcomm Snapdragon Firmware - Out-of-Bounds Write via Improper Array Index Validation
CVSS 9.8
CVE-2019-10512 HIGH
Qualcomm Snapdragon Firmware - Out-of-Bounds Write via Unvalidated Audio Payload Index
CVSS 7.8
CVE-2019-17212 CRITICAL
Arm Mbed OS 5.14.0 - Heap-based and Stack-based Buffer Overflow in CoAP Parser
CVSS 9.8
CVE-2019-10499 HIGH
Qualcomm IPQ4019/IPQ8064/IPQ8074/QCS405/SD 665/SD 675/SD 730/SD 855 Firmware - Out-of-Bounds Access
CVSS 7.8
CVE-2019-14437 HIGH
VLC media player <3.0.7.1 - Buffer Overflow
CVSS 7.8
CVE-2019-15784 CRITICAL
Secure Reliable Transport < 1.3.4 - Array Index Overflow in CSndUList
CVSS 9.8
CVE-2019-13418 HIGH
Search Guard < 24.0 - Improper Validation of Array Index
CVSS 7.5
CVE-2019-2346 HIGH
Qualcomm Snapdragon Firmware - Memory Corruption via Improper Array Index Validation
CVSS 7.8
CVE-2019-2326 HIGH
Qualcomm Snapdragon - Buffer Overflow
CVSS 7.8
CVE-2019-2239 MEDIUM
Qualcomm Snapdragon - Denial of Service
CVSS 5.5
CVE-2019-12957 HIGH
Glyphandcog Xpdfreader - Out-of-Bounds Read
CVSS 7.8
CVE-2019-0906 HIGH
Windows Jet Database Engine - Remote Code Execution via Crafted File
CVSS 7.8
CVE-2019-1837 MEDIUM
Cisco Unified Communications Manager - DoS
CVSS 5.3
CVE-2019-9729 HIGH
Shanda MapleStory Online V160 - Privilege Escalation
CVSS 7.8
CVE-2019-5666 HIGH
NVIDIA Windows GPU Display Driver - DoS or Privilege Escalation via Array Index Validation
CVSS 7.8
CVE-2019-8356 MEDIUM
Sound Exchange - Out-of-Bounds Write
CVSS 5.5
CVE-2019-1000016 MEDIUM
FFmpeg 4.1 - Denial of Service via Crafted AV1 File in libavcodec/cbs_av1.c
CVSS 6.5
CVE-2018-17478 HIGH
Google Chrome < 70.0.3538.102 - Remote Code Execution via V8 Array Index Mismanagement
CVSS 8.8
Details
Vulnerabilities 604
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits