CWE-129 · Improper Validation of Array Index (page 3)
Page 3 of 7 — CVEs classified under CWE-129, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-49894 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma hardware format translation Fixes ind… |
CVE-2024-46871 | High | 7.8 | 2024-10-09 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX [Why & How] I… |
CVE-2024-46859 | High | 7.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses The panasonic lapto… |
CVE-2024-46847 | High | 7.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: mm: vmalloc: ensure vmap_block is initialised before adding to queue Commit 8c61291fd850… |
CVE-2024-46836 | High | 7.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed_udc: validate endpoint index for ast udc We should verify the bound o… |
CVE-2024-46833 | High | 7.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: void array out of bound when loop tnl_num When query reg inf of SSU, it loops… |
CVE-2024-46821 | High | 7.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix negative array index read Avoid using the negative values for clk_idex as… |
CVE-2024-46818 | High | 7.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check gpio_id before used as array index [WHY & HOW] GPIO_ID_UNKNOWN (-1… |
CVE-2024-46814 | High | 7.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check msg_id before processing transcation [WHY & HOW] HDCP_MESSAGE_ID_I… |
CVE-2024-46813 | High | 7.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check link_index before accessing dc->links[] [WHY & HOW] dc->links[] ha… |
CVE-2024-46811 | High | 7.3 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box [Why]… |
CVE-2024-46804 | High | 7.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add array index check for hdcp ddc access [Why] Coverity reports OVERRUN… |
CVE-2024-41565 | Medium | 4.3 | 2024-08-28 | JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue i… |
CVE-2024-41564 | Medium | 4.3 | 2024-08-28 | EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue… |
CVE-2024-42698 | Medium | 4.3 | 2024-08-28 | Roughly Enough Items (REI) v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific i… |
CVE-2022-48883 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to… |
CVE-2024-43858 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: jfs: Fix array-index-out-of-bounds in diFree |
CVE-2024-43842 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() In rtw89_sta_info_get_i… |
CVE-2024-42301 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of-bounds risk Fixed array out-of-bounds issues caused by… |
CVE-2023-31307 | Low | 2.3 | 2024-08-13 | Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, poten… |
CVE-2024-42148 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when us… |
CVE-2024-42121 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index msg_id before read or write [WHAT] msg_id is used as an arra… |
CVE-2024-42120 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check pipe offset before setting vblank pipe_ctx has a size of MAX_PIPES… |
CVE-2024-42117 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: ASSERT when failing to find index by plane/stream id [WHY] find_disp_cfg… |
CVE-2024-42092 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: gpio: davinci: Validate the obtained number of IRQs Value of pdata->gpio_unbanked is take… |
CVE-2024-42088 | High | 7.3 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link Commit e70b8dd26711… |
CVE-2024-41061 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport [Why] Potential… |
CVE-2024-41028 | High | 7.1 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_acpi: Fix array out-of-bounds access In order to use toshiba_dmi_qu… |
CVE-2024-5680 | High | 7.1 | 2024-07-11 | CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service when a malicious actor with local user access crafts… |
CVE-2024-21522 | High | 7.5 | 2024-07-10 | All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new OpusDecoder().decode or new OpusD… |
CVE-2024-32673 | Medium | 5.5 | 2024-07-03 | Improper Validation of Array Index vulnerability in Samsung Open Source Walrus Webassembly runtime engine allows a segmentation fault issue. This issue affect… |
CVE-2024-39461 | Medium | 5.5 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Assign ->num before accessing ->hws Commit f316cdff8d67 ("clk: Annotate st… |
CVE-2024-38631 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: PAC1934: fix accessing out of bounds array index Fix accessing out of bounds ar… |
CVE-2024-38623 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use variable length array instead of fixed size Should fix smatch warning: ntf… |
CVE-2021-4439 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: isdn: cpai: check ctr->cnr to avoid array index out of bound The cmtp_add_connection() wo… |
CVE-2024-38587 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "buf" pointer is an array of u16 values. T… |
CVE-2024-38569 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group The perf tool all… |
CVE-2024-38568 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group The perf tool al… |
CVE-2024-38562 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: Avoid address calculations via out of bounds array indexing Before request… |
CVE-2024-38556 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Add a timeout to acquire the command queue semaphore Prevent forced completion… |
CVE-2024-38552 | High | 7.3 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential index out of bounds in color transformation function Fixes… |
CVE-2024-38542 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mana_ib: boundary check before installing cq callbacks Add a boundary check inside m… |
CVE-2024-36740 | High | 7.5 | 2024-06-06 | An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when index as a negative number exceeds the range of size. |
CVE-2024-36743 | High | 7.5 | 2024-06-06 | An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when an empty array is processed with oneflow.dot. |
CVE-2024-36921 | High | 8.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: guard against invalid STA ID on removal Guard against invalid station… |
CVE-2024-36015 | High | 7.8 | 2024-05-29 | In the Linux kernel, the following vulnerability has been resolved: ppdev: Add an error check in register_device In register_device, the return value of ida_… |
CVE-2024-22181 | High | 7.8 | 2024-05-28 | An out-of-bounds write vulnerability exists in the readNODE functionality of libigl v2.5.0. A specially crafted .node file can lead to an out-of-bounds write… |
CVE-2021-47548 | Critical | 9.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst… |
CVE-2021-47547 | Medium | 4.4 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound In lin… |
CVE-2021-47449 | High | 7.1 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: ice: fix locking for Tx timestamp tracking flush Commit 4dd0d5c33c3e ("ice: add lock arou… |
CVE-2023-52835 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Bail out early if the request AUX area is out of bound When perf-record with a… |
CVE-2023-52819 | Medium | 6.6 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga For pptable structs th… |
CVE-2023-52818 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 For pptable structs that use flexib… |
CVE-2023-52812 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd: check num of link levels when update pcie param In SR-IOV environment, the value… |
CVE-2023-52807 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs The… |
CVE-2023-52805 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diAlloc Currently there is not check against the ag… |
CVE-2023-52804 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add validity check for db_maxag and db_agpref Both db_maxag and db_agpref are use… |
CVE-2023-52799 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in dbFindLeaf Currently while searching for dmtree_t f… |
CVE-2023-52768 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: use vmm_table as array in wilc struct Enabling KASAN and running some ipe… |
CVE-2024-35905 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protecti… |
CVE-2022-48702 | High | 7.8 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() The voice allo… |
CVE-2023-40477 | High | 7.8 | 2024-05-03 | RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb… |
CVE-2023-27349 | High | 8.0 | 2024-05-03 | BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execu… |
CVE-2023-52649 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Avoid reading beyond LUT array When the floor LUT index (drm_fixp2int(lut_index… |
CVE-2024-26981 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix OOB in nilfs_set_de_type The size of the nilfs_type_by_mode array in the fs/n… |
CVE-2024-26971 | High | 7.3 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays The frequency table arr… |
CVE-2024-26969 | High | 7.3 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays The frequency table arr… |
CVE-2024-26968 | High | 7.3 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays The frequency table arr… |
CVE-2024-26967 | High | 7.3 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays The frequency table… |
CVE-2024-26966 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays The frequency table ar… |
CVE-2024-34050 | High | 7.5 | 2024-04-30 | Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64(b[2])<<16 | uint64(b[1])<<8 | uint64(b[0])" in… |
CVE-2024-34048 | Critical | 9.8 | 2024-04-30 | O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler. |
CVE-2024-34047 | Medium | 4.3 | 2024-04-30 | O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler. |
CVE-2023-52728 | Medium | 5.5 | 2024-04-30 | Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString. |
CVE-2024-31581 | Critical | 9.8 | 2024-04-17 | FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c. This vulnerability… |
CVE-2024-26914 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix incorrect mpc_combine array size [why] MAX_SURFACES is per stream, w… |
CVE-2024-23084 | High | 7.5 | 2024-04-08 | Apfloat v1.10.1 was discovered to contain an ArrayIndexOutOfBoundsException via the component org.apfloat.internal.DoubleCRTMath::add(double[], double[]). NOTE… |
CVE-2024-26758 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: md: Don't ignore suspended array in md_check_recovery() mddev_suspend() never stop sync_t… |
CVE-2024-26755 | Medium | 5.3 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: md: Don't suspend the array for interrupted reshape md_start_sync() will suspend the arra… |
CVE-2023-52640 | High | 7.1 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix oob in ntfs_listxattr The length of name cannot exceed the space occupied b… |
CVE-2024-26699 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr [Why] There is a potential… |
CVE-2023-51455 | Medium | 6.8 | 2024-04-02 | A Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to corr… |
CVE-2023-33111 | Medium | 5.5 | 2024-04-01 | Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command. |
CVE-2024-29231 | Medium | 5.4 | 2024-03-28 | Improper validation of array index vulnerability in UserPrivilege.Enum webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allo… |
CVE-2024-2214 | High | 7.0 | 2024-03-26 | In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in the Xtensa port was missing an array size check causing a memory overwrite. The affected… |
CVE-2024-0901 | High | 7.5 | 2024-03-25 | Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the co… |
CVE-2021-47135 | High | 7.8 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix possible AOOB issue in mt7921_mcu_tx_rate_report Fix possible array out… |
CVE-2023-52604 | High | 7.8 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree Syzkaller reported the following issu… |
CVE-2023-52603 | High | 7.8 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: UBSAN: array-index-out-of-bounds in dtSplitRoot Syzkaller reported the following issue: … |
CVE-2023-52601 | High | 7.8 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in dbAdjTree Currently there is a bound check missing… |
CVE-2023-52599 | High | 7.8 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diNewExt [Syz report] UBSAN: array-index-out-of-bou… |
CVE-2023-52594 | High | 7.8 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() Fix an… |
CVE-2021-47065 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: rtw88: Fix array overrun in rtw_get_tx_power_params() Using a kernel with the Undefined B… |
CVE-2021-46984 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: kyber: fix out of bounds access when preempted __blk_mq_sched_bio_merge() gets the ctx an… |
CVE-2020-36776 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/cpufreq_cooling: Fix slab OOB issue Slab OOB issue is scanned by KASAN in… |
CVE-2023-52451 | High | 7.8 | 2024-02-22 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/memhp: Fix access beyond end of drmem array dlpar_memory_remove_by_index(… |
CVE-2024-21493 | Medium | 5.3 | 2024-02-17 | All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a Caddyfile. Multiple parsing… |
CVE-2024-24563 | Critical | 9.8 | 2024-02-07 | Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can be keyed by a signed integer, while they are defined for unsigned inte… |
CVE-2023-43535 | High | 8.4 | 2024-02-06 | Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger. |
CVE-2023-39235 | High | 7.8 | 2024-01-08 | Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can… |