CWE-129 · Improper Validation of Array Index (page 2)
Page 2 of 7 — CVEs classified under CWE-129, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-66559 | | 2025-12-04 | Taiko Alethia is an Ethereum-equivalent, permissionless, based rollup designed to scale Ethereum without compromising its fundamental properties. In 2.3.1 and… | |
CVE-2025-61915 | Medium | 6.0 | 2025-11-29 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can u… |
CVE-2025-0657 | | 2025-11-27 | A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed packets to be sent through BACnet MS/T… | |
CVE-2025-65499 | Medium | 4.3 | 2025-11-24 | Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS… |
CVE-2025-62372 | Medium | 6.5 | 2025-11-21 | vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, users can crash the vLLM engine serving multimod… |
CVE-2025-10158 | Medium | 4.3 | 2025-11-18 | A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The … |
CVE-2025-47361 | High | 7.8 | 2025-11-04 | Memory corruption when triggering a subsystem crash with an out-of-range identifier. |
CVE-2025-47352 | High | 7.8 | 2025-11-04 | Memory corruption while processing audio streaming operations. |
CVE-2023-53485 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev Syzkaller reported the fo… |
CVE-2025-27034 | Critical | 9.8 | 2025-09-24 | Memory corruption while selecting the PLMN from SOR failed list. |
CVE-2025-23338 | Low | 3.3 | 2025-09-24 | NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause an out-of-bounds write by running nvdisasm on a malicious ELF… |
CVE-2023-53395 | High | 7.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer ACPICA commit 90310989a0790032f5a0140741… |
CVE-2023-53340 | High | 7.8 | 2025-09-17 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Collect command failures data only for known commands DEVX can issue a general… |
CVE-2025-39823 | High | 7.8 | 2025-09-16 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that come from guest min and dest_id are gu… |
CVE-2022-50315 | High | 7.8 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS UBSAN complains about array-index-o… |
CVE-2023-53192 | Critical | 9.8 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix nexthop hash size The nexthop code expects a 31 bit hash, such as what is retu… |
CVE-2024-21970 | Medium | 4.4 | 2025-09-06 | Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potentially leading to a l… |
CVE-2023-31306 | Low | 3.3 | 2025-09-06 | Improper validation of an array index in the AMD graphics driver software could allow an attacker to pass malformed arguments to the dynamic power management (… |
CVE-2025-38697 | High | 7.8 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllo… |
CVE-2025-57052 | Critical | 9.8 | 2025-09-03 | cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass a… |
CVE-2025-27075 | High | 7.8 | 2025-08-06 | Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host. |
CVE-2025-27067 | High | 7.8 | 2025-08-06 | Memory corruption while processing DDI call with invalid buffer. |
CVE-2025-54650 | Medium | 4.2 | 2025-08-06 | Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding… |
CVE-2025-54645 | Medium | 5.0 | 2025-08-06 | Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successful exploitation of this vulnerability ma… |
CVE-2025-54644 | Medium | 6.6 | 2025-08-06 | Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerabilit… |
CVE-2025-54643 | Medium | 6.6 | 2025-08-06 | Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerabilit… |
CVE-2025-54610 | Medium | 5.4 | 2025-08-06 | Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-23278 | High | 7.1 | 2025-08-02 | NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted… |
CVE-2025-38367 | High | 8.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Avoid overflow with array index The variable index is modified and reused… |
CVE-2025-38239 | High | 7.3 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Fix invalid node index On a system with DRAM interleave enabled, out-… |
CVE-2024-53009 | Medium | 5.3 | 2025-07-08 | Memory corruption while operating the mailbox in Automotive. |
CVE-2025-38198 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: fbcon: Make sure modelist not set on unregistered console It looks like attempting to wri… |
CVE-2025-38146 | Critical | 9.4 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix the dead loop of MPLS parse The unexpected MPLS packet may not end… |
CVE-2024-35164 | Medium | 6.8 | 2025-07-02 | The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers via text-based protocols like SSH. If… |
CVE-2022-50066 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix aq_vec index out of range error The final update statement of the for… |
CVE-2025-38013 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request Make sure th… |
CVE-2025-5868 | High | 8.0 | 2025-06-09 | A vulnerability, which was classified as critical, has been found in RT-Thread 5.1.0. This issue affects the function sys_thread_sigprocmask of the file rt-thr… |
CVE-2025-5866 | High | 8.0 | 2025-06-09 | A vulnerability classified as critical has been found in RT-Thread 5.1.0. This affects the function sys_sigprocmask of the file rt-thread/components/lwp/lwp_sy… |
CVE-2025-3357 | Critical | 9.8 | 2025-05-28 | IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19 could allow a remote attacker to execute arbitrary code due to improper validation of an index va… |
CVE-2025-48075 | High | 7.5 | 2025-05-22 | Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, `fiber.Ctx.BodyParser` can map flat data to n… |
CVE-2025-1975 | High | 7.5 | 2025-05-16 | A vulnerability in the Ollama server version 0.5.11 allows a malicious user to cause a Denial of Service (DoS) attack by customizing the manifest content and s… |
CVE-2024-45578 | High | 7.8 | 2025-05-06 | Memory corruption while acquire and update IOCTLs during IFE output resource ID validation. |
CVE-2024-45576 | High | 7.8 | 2025-05-06 | Memory corruption while prociesing command buffer buffer in OPE module. |
CVE-2024-45574 | High | 7.8 | 2025-05-06 | Memory corruption during array access in Camera kernel due to invalid index from invalid command data. |
CVE-2025-37752 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation It is not sufficient to directly validate t… |
CVE-2025-40114 | High | 7.8 | 2025-04-18 | In the Linux kernel, the following vulnerability has been resolved: iio: light: Add check for array bounds in veml6075_read_int_time_ms The array contains on… |
CVE-2025-40014 | High | 7.8 | 2025-04-18 | In the Linux kernel, the following vulnerability has been resolved: objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq() If speed_hz < AMD… |
CVE-2025-39728 | Medium | 5.5 | 2025-04-18 | In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fix UBSAN panic in samsung_clk_init() With UBSAN_ARRAY_BOUNDS=y, I'm hittin… |
CVE-2025-22067 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock() If requested… |
CVE-2025-21447 | High | 7.8 | 2025-04-07 | Memory corruption may occur while processing device IO control call for session control. |
CVE-2025-21423 | High | 7.8 | 2025-04-07 | Memory corruption occurs when handling client calls to EnableTestMode through an Escape call. |
CVE-2025-21991 | High | 7.8 | 2025-04-02 | In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes Currently, load_… |
CVE-2023-53019 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobus_get_phy() The caller may pass any value as… |
CVE-2023-53000 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: netlink: prevent potential spectre v1 gadgets Most netlink attributes are parsed and vali… |
CVE-2023-52988 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() snd_hda_get_co… |
CVE-2023-52987 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write() The "id"… |
CVE-2025-30077 | Medium | 6.2 | 2025-03-16 | Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits. |
CVE-2024-53014 | High | 7.8 | 2025-03-03 | Memory corruption may occur while validating ports and channels in Audio driver. |
CVE-2024-49836 | High | 7.8 | 2025-03-03 | Memory corruption may occur during the synchronization of the camera`s frame processing pipeline. |
CVE-2024-57996 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The current implementation does not work c… |
CVE-2022-49720 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: block: Fix handling of offline queues in blk_mq_alloc_request_hctx() This patch prevents… |
CVE-2022-49548 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential array overflow in bpf_trampoline_get_progs() The cnt value in the 'cnt… |
CVE-2022-49478 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init Syzbot reported that… |
CVE-2022-49471 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: rtw89: cfo: check mac_id to avoid out-of-bounds Somehow, hardware reports incorrect mac_i… |
CVE-2022-49186 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: clk: visconti: prevent array overflow in visconti_clk_register_gates() This code was usin… |
CVE-2022-49170 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on curseg->alloc_type As Wenqing Liu reported in bugzilla: … |
CVE-2025-21692 | High | 7.8 | 2025-02-10 | In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan <g1042620637@gmail.com> found that ets_… |
CVE-2024-49843 | High | 7.8 | 2025-02-03 | Memory corruption while processing IOCTL from user space to handle GPU AHB bus error. |
CVE-2024-49837 | High | 7.8 | 2025-02-03 | Memory corruption while reading CPU state data during guest VM suspend. |
CVE-2024-49834 | High | 7.8 | 2025-02-03 | Memory corruption while power-up or power-down sequence of the camera sensor. |
CVE-2024-49833 | High | 7.8 | 2025-02-03 | Memory corruption can occur in the camera when an invalid CID is used. |
CVE-2024-49832 | High | 7.8 | 2025-02-03 | Memory corruption in Camera due to unusually high number of nodes passed to AXI port. |
CVE-2024-45582 | High | 7.8 | 2025-02-03 | Memory corruption while validating number of devices in Camera kernel . |
CVE-2024-45569 | Critical | 9.8 | 2025-02-03 | Memory corruption while parsing the ML IE due to invalid frame content. |
CVE-2025-21680 | High | 7.8 | 2025-01-31 | In the Linux kernel, the following vulnerability has been resolved: pktgen: Avoid out-of-bounds access in get_imix_entries Passing a sufficient amount of imi… |
CVE-2024-45550 | High | 7.8 | 2025-01-06 | Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls. |
CVE-2024-56616 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Fix MST sideband message body length check Fix the MST sideband message body… |
CVE-2024-56608 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' An issue was ide… |
CVE-2024-56598 | High | 7.1 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: jfs: array-index-out-of-bounds fix in dtReadFirst The value of stbl can be sometimes out… |
CVE-2024-56596 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in jfs_readdir The stbl might contain some invalid val… |
CVE-2024-56595 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree When the value of lp i… |
CVE-2024-53228 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: Fix out-of-bounds array access In kvm_riscv_vcpu_sbi_init() the entry->ext_id… |
CVE-2024-53214 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Properly hide first-in-list PCIe extended capability There are cases where a PC… |
CVE-2024-53203 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() The "command" variab… |
CVE-2024-53156 | High | 7.8 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() I found the follo… |
CVE-2024-33044 | High | 8.4 | 2024-12-02 | Memory corruption while Configuring the SMR/S2CR register in Bypass mode. |
CVE-2024-47249 | Medium | 5.0 | 2024-11-26 | Improper Validation of Array Index vulnerability in Apache NimBLE. Lack of input validation for HCI events from controller could result in out-of-bound memory… |
CVE-2024-50291 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: add missing buffer index check dvb_vb2_expbuf() didn't check if the give… |
CVE-2024-50161 | High | 7.8 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check the remaining info_cnt before repeating btf fields When trying to repeat the b… |
CVE-2024-51517 | Medium | 5.1 | 2024-11-05 | Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-33032 | Medium | 6.7 | 2024-11-04 | Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it. |
CVE-2022-49022 | High | 8.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration Fix possible out-of… |
CVE-2022-48979 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix array index out of bound error in DCN32 DML [Why&How] LinkCapacitySu… |
CVE-2022-48967 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Bounds check struct nfc_target arrays While running under CONFIG_FORTIFY_SOURCE… |
CVE-2024-50007 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the stat… |
CVE-2024-49970 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Implement bounds check for stream encoder creation in DCN401 'stream_enc… |
CVE-2024-49969 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 color transformation This commit addres… |
CVE-2024-49931 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix array out-of-bound access in SoC stats Currently, the ath12k_soc_dp_sta… |
CVE-2024-49930 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix array out-of-bound access in SoC stats Currently, the ath11k_soc_dp_sta… |
CVE-2024-49895 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation Thi… |