CWE-129

High likelihood

Improper Validation of Array Index

Parent: CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

556 vulnerabilities with CWE-129
CVE-2025-22067 HIGH
Linux Kernel - Buffer Overflow
CVSS 7.8
CVE-2025-21447 HIGH
Qualcomm Fastconnect 6900 Firmware - Improper Array Index Validation
CVSS 7.8
CVE-2025-21423 HIGH
Qualcomm Aqt1000 Firmware - Improper Array Index Validation
CVSS 7.8
CVE-2025-21991 HIGH
Linux kernel - Buffer Overflow
CVSS 7.8
CVE-2025-30077 MEDIUM
Onosproject Onos-lib-go - Improper Array Index Validation
CVSS 6.2
CVE-2025-21692 HIGH
Linux kernel - Privilege Escalation
CVSS 7.8
CVE-2025-21680 HIGH
Linux kernel - Buffer Overflow
CVSS 7.8
CVE-2024-21970 MEDIUM
AGESA Firmware - Memory Corruption
CVSS 4.4
CVE-2024-53009 MEDIUM
Qualcomm Aqt1000 Firmware - Improper Array Index Validation
CVSS 5.3
CVE-2024-35164 MEDIUM
Apache Guacamole < 1.6.0 - Improper Array Index Validation
CVSS 6.8
CVE-2024-45578 HIGH
Qualcomm Fastconnect 6900 Firmware - Improper Array Index Validation
CVSS 7.8
CVE-2024-45576 HIGH
Qualcomm Fastconnect 6900 Firmware - Improper Array Index Validation
CVSS 7.8
CVE-2024-45574 HIGH
Qualcomm Sdm429w Firmware - Improper Array Index Validation
CVSS 7.8
CVE-2024-53014 HIGH
Qualcomm Sm6370 Firmware - Improper Array Index Validation
CVSS 7.8
CVE-2024-49836 HIGH
Qualcomm Camera Frame Processing Pipeline Firmware - Memory Corruption
CVSS 7.8
CVE-2024-57996 MEDIUM
Linux Kernel < 6.1.129 - Improper Array Index Validation
CVSS 5.5
CVE-2024-49843 HIGH
Qualcomm FastConnect and QCA/QCM/QCS Firmware - Memory Corruption in GPU AHB Bus Error Handling
CVSS 7.8
CVE-2024-49837 HIGH
VMware <version> - Memory Corruption
CVSS 7.8
CVE-2024-49834 HIGH
Camera Sensor <Version - Memory Corruption
CVSS 7.8
CVE-2024-49833 HIGH
Qualcomm FastConnect and QAM Firmware - Memory Corruption in Camera
CVSS 7.8
CVE-2024-49832 HIGH
Qualcomm FastConnect and Multiple Firmware - Memory Corruption in Camera
CVSS 7.8
CVE-2024-45582 HIGH
Qualcomm Fastconnect 6900 Firmware - Improper Array Index Validation
CVSS 7.8
CVE-2024-45569 CRITICAL
Qualcomm Ar8035 Firmware - Improper Array Index Validation
CVSS 9.8
CVE-2024-45550 HIGH
Qualcomm Fastconnect 6900 Firmware - Improper Array Index Validation
CVSS 7.8
CVE-2024-56616 HIGH
Linux kernel - Buffer Overflow
CVSS 7.8
Details
Vulnerabilities 556
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits