CWE-129

High likelihood

Improper Validation of Array Index

Parent: CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

604 vulnerabilities with CWE-129
CVE-2018-5903 HIGH
Snapdragon Auto/Mobile/Industrial/IoT - Out of bounds read
CVSS 7.8
CVE-2018-5883 HIGH
Qualcomm Multiple Chipsets Firmware - Buffer Overflow in WLAN Driver Event Handler
CVSS 7.8
CVE-2018-13902 HIGH
Qualcomm Snapdragon Firmware - Out-of-Bounds Memory Read via XTRA File Decoding
CVSS 7.5
CVE-2018-11927 HIGH
Snapdragon Auto - Array Index Out of Bounds
CVSS 7.8
CVE-2018-13913 HIGH
Qualcomm Snapdragon Firmware - Unauthorized Access via Improper Array Index Validation in debugFS
CVSS 7.8
CVE-2018-11948 MEDIUM
Snapdragon Auto <various - Info Disclosure
CVSS 5.5
CVE-2018-11899 HIGH
Qualcomm Snapdragon Firmware - Out-of-Bounds Write via Radio Index Validation
CVSS 7.8
CVE-2018-11288 HIGH
Qualcomm Mdm9206 Firmware - Improper Array Index Validation
CVSS 7.8
CVE-2018-4210 HIGH
Safari < 11.1 - Memory Corruption via JavaScript Array Indexing
CVSS 8.8
CVE-2018-17458 HIGH
Google Chrome < 69.0.3497.92 - Remote Code Execution via WebAssembly Dispatch Table
CVSS 8.8
CVE-2018-11996 HIGH
Snapdragon Automobile/Mobile/Wear <various - Buffer Overflow
CVSS 7.8
CVE-2018-5914 HIGH
Snapdragon Mobile/Snapdragon Wear - Info Disclosure
CVSS 7.8
CVE-2018-17848 HIGH
golang/net < 2018-09-25 - Denial of Service via Malformed HTML Parsing
CVSS 7.5
CVE-2018-11269 HIGH
Qualcomm Snapdragon Firmware - Buffer Overflow via TFTP Options Parsing
CVSS 7.8
CVE-2018-11268 HIGH
Qualcomm Snapdragon Firmware - Buffer Overflow via TFTP Options Parsing
CVSS 7.8
CVE-2018-11267 HIGH
Qualcomm Snapdragon Firmware - Memory Corruption via Malformed XML in Firehose
CVSS 7.8
CVE-2018-11903 HIGH
Android - Out-of-Bounds Write in WLAN HOST via WMA Interface Array Index
CVSS 7.8
CVE-2018-11902 HIGH
Android - Out-of-Bounds Access in WLAN HOST via Firmware Value
CVSS 7.8
CVE-2018-11891 HIGH
Android - Out-of-Bounds Read in WLAN HOST Function
CVSS 8.8
CVE-2018-11883 HIGH
Android - Out-of-Bounds Memory Access via WLAN Policy Manager Mode Parameter
CVSS 7.8
CVE-2018-11827 HIGH
Android - Out-of-Bounds Write via WMA Roam Synchronization Handler
CVSS 7.8
CVE-2018-11299 HIGH
Android - Out-of-Bounds Memory Access in WLAN Host Driver via Invalid VDEV ID
CVSS 7.8
CVE-2018-16648 MEDIUM
Artifex MuPDF 1.13.0 - Denial of Service via PDF Device Alpha Array Index Underflow
CVSS 5.5
CVE-2018-11263 HIGH
Android - Out-of-Bounds Write via Radio Stats Buffer Access
CVSS 8.8
CVE-2018-5894 MEDIUM
Qualcomm Multiple Chipsets Firmware - Out-of-bounds Read in MP4 Parser
CVSS 6.5
Details
Vulnerabilities 604
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits