CWE-1285 · Input Validation and Logic
Improper Validation of Specified Index, Position, or Offset in Input
56CVEs
SortMost likely exploited
56 CVEs with CWE-1285 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-7848Missing input check in lvpict.cpp used in NI LabVIEWNI · LabVIEW · CVSS 7.8 · 2025-07-29 | 7.8 | 6.1% | 2025-07-29 |
| CVE-2022-21821NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially…NVIDIA · NVIDIA CUDA Toolkit · CVSS 7.8 · 2022-03-29 | 7.8 | 2.1% | 2022-03-29 |
| CVE-2026-107821MariaDB: insufficient validation of binary frm data when opening a tableMariaDB · server · CVSS 8 · 2026-10-09 | 8.0 | 1.2% | 2026-10-09 |
| CVE-2025-3357IBM Tivoli Monitoring code executionIBM · Tivoli Monitoring · CVSS 9.8 · 2025-05-28 | 9.8 | 1.1% | 2025-05-28 |
| CVE-2020-25241A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does not correctly validate the sequence num…Siemens · SIMATIC MV400 family · 2021-03-15 | – | 1.1% | 2021-03-15 |
| CVE-2022-22223Junos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.Juniper Networks · Junos OS · CVSS 6.5 · 2022-10-18 | 6.5 | 0.9% | 2022-10-18 |
| CVE-2026-33557Apache Kafka: Missing JWT token validation in OAUTHBEARER authenticationApache Software Foundation · Apache Kafka · CVSS 9.1 · 2026-04-20 | 9.1 | 0.9% | 2026-04-20 |
| CVE-2025-3755Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU moduleMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ES · CVSS 9.1 · 2025-05-29 | 9.1 | 0.9% | 2025-05-29 |
| CVE-2022-22201SRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packetJuniper Networks · Junos OS · CVSS 7.5 · 2022-10-18 | 7.5 | 0.7% | 2022-10-18 |
| CVE-2024-23612Improper Error Handling Issue in LabVIEWNI · LabVIEW · CVSS 7.8 · 2024-03-11 | 7.8 | 0.6% | 2024-03-11 |
| CVE-2024-23609Improper Error Handling Issue in LabVIEWNI · LabVIEW · CVSS 7.8 · 2024-03-11 | 7.8 | 0.6% | 2024-03-11 |
| CVE-2025-2399Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC SeriesMitsubishi Electric Corporation · Mitsubishi Electric CNC M800V Series M800VW · CVSS 5.9 · 2026-03-10 | 5.9 | 0.6% | 2026-03-10 |
| CVE-2023-0859Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/…Canon Inc. · Canon Office/Small Office Multifunction Printers and Laser Printers · CVSS 2.2 · 2023-05-11 | 2.2 | 0.5% | 2023-05-11 |
| CVE-2022-36363A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (…Siemens · LOGO! 12/24RCE · CVSS 5.3 · 2022-10-11 | 5.3 | 0.5% | 2022-10-11 |
| CVE-2025-8291ZIP64 End of Central Directory (EOCD) Locator record offset not checkedPython Software Foundation · CPython · CVSS 4.3 · 2025-10-07 | 4.3 | 0.5% | 2025-10-07 |
| CVE-2024-51564bhyve(8) infinite loop in the hda audio driverFreeBSD · FreeBSD · CVSS 7.5 · 2024-11-12 | 7.5 | 0.5% | 2024-11-12 |
| CVE-2025-55087In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3 security parameters.Eclipse Foundation · NextX Duo · CVSS 6.3 · 2025-10-17 | 6.3 | 0.5% | 2025-10-17 |
| CVE-2025-55086In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the…Eclipse Foundation · NextX Duo · CVSS 6.3 · 2025-10-20 | 6.3 | 0.4% | 2025-10-20 |
| CVE-2024-51566bhyve(8) NVMe driver to guest-induced infinite loops.FreeBSD · FreeBSD · CVSS 6.5 · 2024-11-12 | 6.5 | 0.4% | 2024-11-12 |
| CVE-2026-27138Panic in name constraint checking for malformed certificates in crypto/x509Go standard library · crypto/x509 · CVSS 5.9 · 2026-03-06 | 5.9 | 0.4% | 2026-03-06 |
| CVE-2026-45352cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encodingyhirose · cpp-httplib · CVSS 5.3 · 2026-05-29 | 5.3 | 0.3% | 2026-05-29 |
| CVE-2023-36850Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.Juniper Networks · Junos OS · CVSS 6.5 · 2023-07-14 | 6.5 | 0.3% | 2023-07-14 |
| CVE-2026-9100Heap memory out of bounds read and crash in C Driver legacy GridFS file readerMongoDB, Inc. · C Driver · CVSS 5.9 · 2026-05-20 | 5.9 | 0.3% | 2026-05-20 |
| CVE-2025-9189Out Of Bounds Write when parsing a DSB file with Digilent DASYLabDigilent · DASYLab · CVSS 7.8 · 2025-09-02 | 7.8 | 0.3% | 2025-09-02 |
| CVE-2025-7849Memory Corruption Issue in NI LabVIEW due to improper error handlingNI · LabVIEW · CVSS 7.8 · 2025-07-29 | 7.8 | 0.3% | 2025-07-29 |
| CVE-2018-25232Softros LAN Messenger 9.2 Denial of Service via Log Files LocationMessenger · Softros LAN Messenger · CVSS 5.5 · 2026-03-30 | 5.5 | 0.3% | 2026-03-30 |
| CVE-2025-57778Out Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLabDigilent · DASYLab · CVSS 7.8 · 2025-09-02 | 7.8 | 0.3% | 2025-09-02 |
| CVE-2025-57777Out Of Bounds Write in displ2.dll when parsing a DSB file with Digilent DASYLabDigilent · DASYLab · CVSS 7.8 · 2025-09-02 | 7.8 | 0.3% | 2025-09-02 |
| CVE-2025-57776Out Of Bounds Write to invalid address when parsing a DSB file with Digilent DASYLabDigilent · DASYLab · CVSS 7.8 · 2025-09-02 | 7.8 | 0.3% | 2025-09-02 |
| CVE-2025-57774Out Of Bounds Write of invalid data when parsing a DSB file with Digilent DASYLabDigilent · DASYLab · CVSS 7.8 · 2025-09-02 | 7.8 | 0.3% | 2025-09-02 |
| CVE-2026-12681Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Google go-attestation. parseEfiSignatureList() does not advance the buffer past vendor bytes…Google · go-attestation · CVSS 8.9 · 2026-06-24 | 8.9 | 0.3% | 2026-06-24 |
| CVE-2025-57775Heap-based Buffer Overflow when parsing a DSB file with Digilent DASYLabDigilent · DASYLab · CVSS 7.8 · 2025-09-02 | 7.8 | 0.3% | 2025-09-02 |
| CVE-2026-110736Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTranslation::get_message). Offsets read f…godotengine · Godot Engine · CVSS 3.6 · 2026-10-14 | 3.6 | 0.2% | 2026-10-14 |
| CVE-2024-0123NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line tool where an attacker may cause an improper validation in input issue by tricking…NVIDIA · CUDA Toolkit · CVSS 3.3 · 2024-10-03 | 3.3 | 0.2% | 2024-10-03 |
| CVE-2024-10496Out of bounds read in BuildFontMap in fontmgr.cpp in NI LabVIEWNI · LabVIEW · CVSS 7.8 · 2024-12-10 | 7.8 | 0.2% | 2024-12-10 |
| CVE-2024-10495Out of bounds read when loading the font table in fontmgr.cpp in NI LabVIEWNI · LabVIEW · CVSS 7.8 · 2024-12-10 | 7.8 | 0.2% | 2024-12-10 |
| CVE-2024-10494Out of bounds read in HeapObjMapImpl.cpp in NI LabVIEWNI · LabVIEW · CVSS 7.8 · 2024-12-10 | 7.8 | 0.2% | 2024-12-10 |
| CVE-2025-2634Out of Bounds Read Vulnerability in NI LabVIEW when building font mapNI · LabVIEW · CVSS 7.8 · 2025-07-23 | 7.8 | 0.2% | 2025-07-23 |
| CVE-2025-2633Out of Bounds Read Vulnerability in NI LabVIEW when loading fontsNI · LabVIEW · CVSS 7.8 · 2025-07-23 | 7.8 | 0.2% | 2025-07-23 |
| CVE-2019-25625Blob Studio 2.17 Denial of Service via Malformed InputPixarra · Blob Studio · CVSS 6.2 · 2026-03-23 | 6.2 | 0.2% | 2026-03-23 |
| CVE-2019-25622Paint Studio 2.17 Denial of Service via Malformed InputPixarra · Paint Studio · CVSS 6.2 · 2026-03-23 | 6.2 | 0.2% | 2026-03-23 |
| CVE-2026-89410Out-of-bounds read in Z-Wave NCP SPI HandlerSilicon Labs · Z-Wave SDK · CVSS 5.1 · 2026-10-22 | 5.1 | 0.2% | 2026-10-22 |
| CVE-2019-25593jetCast Server 2.0 Denial of Service via Log DirectoryJetaudio · jetCast Server · CVSS 5.5 · 2026-03-22 | 5.5 | 0.2% | 2026-03-22 |
| CVE-2024-36342Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution.AMD · AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics · CVSS 8.8 · 2025-09-06 | 8.8 | 0.2% | 2025-09-06 |
| CVE-2026-18485Local Privilege Escalation in NI-PALNI · NI-PAL · CVSS 7.8 · 2026-08-05 | 7.8 | 0.2% | 2026-08-05 |
| CVE-2026-14479Denial of Service in Autodesk Installer IPC ChannelAutodesk · Installer · CVSS 5.5 · 2026-08-12 | 5.5 | 0.2% | 2026-08-12 |
| CVE-2026-20524In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. Us…MediaTek, Inc. · MediaTek chipset · CVSS 8.4 · 2026-10-05 | 8.4 | 0.1% | 2026-10-05 |
| CVE-2025-48511Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.AMD · AMD μProf · CVSS 5.5 · 2025-11-24 | 5.5 | 0.1% | 2025-11-24 |
| CVE-2025-48502Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.AMD · AMD μProf · CVSS 5.5 · 2025-11-21 | 5.5 | 0.1% | 2025-11-21 |
| CVE-2026-8036Local privilege escalation in NI-PALNI · NI-PAL · CVSS 7.1 · 2026-06-02 | 7.1 | 0.1% | 2026-06-02 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.