CWE-129 · Improper Validation of Array Index (page 4)
Page 4 of 7 — CVEs classified under CWE-129, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-39234 | High | 7.8 | 2024-01-08 | Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can… |
CVE-2023-35997 | High | 7.8 | 2024-01-08 | Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst fi… |
CVE-2023-35996 | High | 7.8 | 2024-01-08 | Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst fi… |
CVE-2023-35995 | High | 7.8 | 2024-01-08 | Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst fi… |
CVE-2023-35994 | High | 7.8 | 2024-01-08 | Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst fi… |
CVE-2023-33053 | High | 8.4 | 2023-12-05 | Memory corruption in Kernel while parsing metadata. |
CVE-2023-6298 | Medium | 4.3 | 2023-11-26 | A vulnerability classified as problematic was found in Apryse iText 8.0.2. This vulnerability affects the function main of the file PdfDocument.java. The manip… |
CVE-2023-46724 | High | 8.6 | 2023-11-01 | Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled us… |
CVE-2023-35126 | High | 7.8 | 2023-10-19 | An out-of-bounds write vulnerability exists within the parsers for both the "DocumentViewStyles" and "DocumentEditStyles" streams of Ichitaro 2023 1.0.1.59372… |
CVE-2023-24850 | High | 7.8 | 2023-10-03 | Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application. |
CVE-2023-28573 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while parsing WMI command parameters. |
CVE-2023-28567 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while handling command through WMI interfaces. |
CVE-2023-28565 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while handling command streams through WMI interfaces. |
CVE-2023-28558 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN handler while processing PhyID in Tx status handler. |
CVE-2023-28557 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload. |
CVE-2023-28548 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART. |
CVE-2023-21636 | Medium | 6.7 | 2023-09-05 | Memory Corruption due to improper validation of array index in Linux while updating adn record. |
CVE-2022-40534 | High | 8.4 | 2023-09-05 | Memory corruption due to improper validation of array index in Audio. |
CVE-2022-33275 | High | 8.4 | 2023-09-05 | Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range. |
CVE-2023-36307 | Medium | 5.5 | 2023-09-05 | ZPLGFA 1.1.1 allows attackers to cause a panic (because of an integer index out of range during a ConvertToGraphicField call) via an image of zero width. NOTE… |
CVE-2023-36308 | Medium | 5.5 | 2023-09-05 | disintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Grayscale call) via a crafted TIFF file to th… |
CVE-2022-48503 | High | 8.8 | 2023-08-14 | The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6… |
CVE-2023-21650 | Medium | 6.7 | 2023-08-08 | Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length. |
CVE-2023-29458 | Medium | 5.9 | 2023-07-13 | Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact footprint. When adding too many values in valstack JavaScript wil… |
CVE-2023-31194 | Medium | 5.3 | 2023-07-05 | An improper array index validation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0.139. A specially crafted markdown file can lead… |
CVE-2023-2570 | High | 7.0 | 2023-06-14 | A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service, and potentially kernel execution when a malicio… |
CVE-2023-0950 | High | 7.8 | 2023-05-25 | Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet… |
CVE-2022-33281 | Medium | 6.7 | 2023-05-02 | Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames. |
CVE-2023-28004 | Critical | 9.8 | 2023-04-18 | A CWE-129: Improper validation of an array index vulnerability exists where a specially crafted Ethernet request could result in denial of service or remote… |
CVE-2023-2008 | High | 8.2 | 2023-04-14 | A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied d… |
CVE-2022-33302 | Medium | 6.8 | 2023-04-13 | Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length. |
CVE-2022-33289 | Medium | 6.8 | 2023-04-13 | Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card. |
CVE-2023-26066 | Critical | 9.8 | 2023-04-10 | Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index. |
CVE-2022-38072 | Medium | 6.5 | 2023-04-03 | An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially… |
CVE-2023-20080 | High | 8.6 | 2023-03-23 | A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker… |
CVE-2022-40539 | High | 8.4 | 2023-03-10 | Memory corruption in Automotive Android OS due to improper validation of array index. |
CVE-2022-40537 | High | 7.3 | 2023-03-10 | Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response. |
CVE-2022-33256 | Critical | 9.8 | 2023-03-10 | Memory corruption due to improper validation of array index in Multi-mode call processor. |
CVE-2023-20633 | Medium | 6.7 | 2023-03-07 | In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-0755 | Critical | 9.8 | 2023-02-23 | The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrar… |
CVE-2022-47348 | Medium | 5.5 | 2023-02-12 | In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. |
CVE-2022-47347 | Medium | 5.5 | 2023-02-12 | In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. |
CVE-2022-47346 | Medium | 5.5 | 2023-02-12 | In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. |
CVE-2022-47345 | Medium | 5.5 | 2023-02-12 | In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. |
CVE-2022-47344 | Medium | 5.5 | 2023-02-12 | In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. |
CVE-2022-47343 | Medium | 5.5 | 2023-02-12 | In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. |
CVE-2022-47342 | Medium | 5.5 | 2023-02-12 | In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. |
CVE-2023-22408 | High | 7.5 | 2023-01-13 | An Improper Validation of Array Index vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX 5000 Series allows a network-based, unauthenticated atta… |
CVE-2023-22401 | High | 7.5 | 2023-01-13 | An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon (aftmand) of Juniper Networks Junos OS and Junos OS Evolv… |
CVE-2022-33274 | High | 8.4 | 2023-01-09 | Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication. |
CVE-2022-42255 | Medium | 5.3 | 2022-12-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of se… |
CVE-2022-42254 | Medium | 5.3 | 2022-12-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of se… |
CVE-2022-31745 | Medium | 4.3 | 2022-12-22 | If array shift operations are not used, the Garbage Collector may have become confused about valid objects. This vulnerability affects Firefox < 101. |
CVE-2022-2951 | High | 7.8 | 2022-12-13 | Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to improper validation of array index vulnerability during processing of H3D files. A… |
CVE-2022-25711 | Medium | 6.7 | 2022-12-13 | Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IO… |
CVE-2022-25695 | High | 8.4 | 2022-12-13 | Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdrago… |
CVE-2022-46152 | High | 8.2 | 2022-11-29 | OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validatio… |
CVE-2022-25720 | Critical | 9.8 | 2022-10-19 | Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon C… |
CVE-2022-42011 | Medium | 6.5 | 2022-10-10 | An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and… |
CVE-2022-25690 | High | 7.5 | 2022-09-16 | Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2022-22099 | High | 8.4 | 2022-09-02 | Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto |
CVE-2022-35737 | High | 7.5 | 2022-08-03 | SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API. |
CVE-2022-31135 | Medium | 6.5 | 2022-07-07 | Akashi is an open source server implementation of the Attorney Online video game based on the Ace Attorney universe. Affected versions of Akashi are subject to… |
CVE-2022-31603 | Medium | 6.4 | 2022-07-04 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned IpSecDxe global data can exploit improp… |
CVE-2021-35126 | High | 8.4 | 2022-06-14 | Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Ind… |
CVE-2021-35121 | Medium | 6.7 | 2022-06-14 | An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon Compute, Snapdragon… |
CVE-2021-35072 | High | 7.8 | 2022-06-14 | Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag… |
CVE-2022-30763 | High | 7.5 | 2022-05-16 | Janet before 1.22.0 mishandles arrays. |
CVE-2020-35632 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-35631 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-35630 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-35629 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28635 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28634 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28633 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28632 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28631 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28630 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28629 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28628 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28627 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28626 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28625 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28624 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28623 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28622 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28621 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28620 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28619 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28618 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28617 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28616 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28615 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28614 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28613 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28612 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28611 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28610 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28609 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |
CVE-2020-28608 | High | 8.8 | 2022-04-18 | Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead… |