CWE-129

High likelihood

Improper Validation of Array Index

Parent: CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

572 vulnerabilities with CWE-129
CVE-2024-35164 MEDIUM
Apache Guacamole < 1.6.0 - Remote Code Execution via Terminal Emulator Console Code Injection
CVSS 6.8
CVE-2024-45578 HIGH
Qualcomm FastConnect 6900 Firmware - Memory Corruption via IFE Output Resource ID Validation
CVSS 7.8
CVE-2024-45576 HIGH
Qualcomm FastConnect 6900 Firmware - Memory Corruption in OPE Module via Command Buffer Processing
CVSS 7.8
CVE-2024-45574 HIGH
Qualcomm SDM429W Firmware - Memory Corruption in Camera Kernel via Invalid Array Index
CVSS 7.8
CVE-2024-53014 HIGH
Qualcomm FastConnect 7800 Firmware - Memory Corruption in Audio Driver Port and Channel Validation
CVSS 7.8
CVE-2024-49836 HIGH
Qualcomm Camera Frame Processing Pipeline Firmware - Memory Corruption
CVSS 7.8
CVE-2024-57996 MEDIUM
Linux Kernel - Array Index Out-of-Bounds in SFQ Scheduler via Packet Limit Handling
CVSS 5.5
CVE-2024-49843 HIGH
Qualcomm FastConnect and QCA/QCM/QCS Firmware - Memory Corruption in GPU AHB Bus Error Handling
CVSS 7.8
CVE-2024-49837 HIGH
VMware <version> - Memory Corruption
CVSS 7.8
CVE-2024-49834 HIGH
Camera Sensor <Version - Memory Corruption
CVSS 7.8
CVE-2024-49833 HIGH
Qualcomm FastConnect and QAM Firmware - Memory Corruption in Camera
CVSS 7.8
CVE-2024-49832 HIGH
Qualcomm FastConnect and Multiple Firmware - Memory Corruption in Camera
CVSS 7.8
CVE-2024-45582 HIGH
Qualcomm FastConnect 6900 Firmware - Memory Corruption in Camera Kernel Device Validation
CVSS 7.8
CVE-2024-45569 CRITICAL
Qualcomm AR8035 Firmware - Memory Corruption via ML IE Frame Parsing
CVSS 9.8
CVE-2024-45550 HIGH
Qualcomm Fastconnect 6900 Firmware - Improper Array Index Validation
CVSS 7.8
CVE-2024-56616 HIGH
Linux Kernel Memory Corruption via MST Sideband Message Body Length Check
CVSS 7.8
CVE-2024-56608 HIGH
Linux Kernel - Out-of-Bounds Array Access in dcn21_link_encoder_create
CVSS 7.8
CVE-2024-56598 HIGH
Linux Kernel - Out-of-Bounds Array Index Access in JFS dtReadFirst
CVSS 7.8
CVE-2024-56596 HIGH
Linux Kernel - Array Index Out-of-Bounds in jfs_readdir
CVSS 7.8
CVE-2024-56595 HIGH
Linux Kernel - Array Index Out-of-Bounds in JFS dbAdjTree
CVSS 7.8
CVE-2024-53228 HIGH
Linux Kernel 6.7-6.11.11 6.12.0-6.12.2 - Out-of-Bounds Array Access in RISC-V KVM SBI Extension Handling
CVSS 7.8
CVE-2024-53214 HIGH
Linux Kernel - Out-of-Bounds Array Access in VFIO PCI Config Map
CVSS 7.8
CVE-2024-53203 HIGH
Linux Kernel - Array Index Underflow in UCSI Connector Control
CVSS 7.8
CVE-2024-53156 HIGH
Linux Kernel ath9k htc_connect_service Out-of-Bounds Array Indexing
CVSS 7.8
CVE-2024-33044 HIGH
Qualcomm 315 5G IoT Modem Firmware - Memory Corruption via SMR/S2CR Register Configuration
CVSS 8.4
Details
Vulnerabilities 572
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits