CWE-129 · Memory Corruption
Improper Validation of Array Index
648CVEs
SortMost likely exploited
648 CVEs with CWE-129 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-48503In CISA KEVExploitedThe issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web cont…Apple · macOS · CVSS 8.8 · 2023-08-14 | 8.8 | 3.2% | 2023-08-14 |
| CVE-2021-35592Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.23 and prior, 7.6.19 and prior and 8.0.26 an…Oracle Corporation · MySQL Cluster · CVSS 6.3 · 2021-10-20 | 6.3 | 52% | 2021-10-20 |
| CVE-2021-35598Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and p…Oracle Corporation · MySQL Cluster · CVSS 6.3 · 2021-10-20 | 6.3 | 51% | 2021-10-20 |
| CVE-2021-35594Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and p…Oracle Corporation · MySQL Cluster · CVSS 6.3 · 2021-10-20 | 6.3 | 51% | 2021-10-20 |
| CVE-2022-35737SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.Sqlite · Sqlite · CVSS 7.5 · 2022-08-03 | 7.5 | 24% | 2022-08-03 |
| CVE-2014-6317Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, W…Microsoft · Windows 7 · 2014-11-11 | – | 18% | 2014-11-11 |
| CVE-2023-0755The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.PTC · ThingWorx Edge C-SDK · CVSS 9.8 · 2023-02-23 | 9.8 | 12% | 2023-02-23 |
| CVE-2023-40477RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution VulnerabilityRARLAB · WinRAR · CVSS 7.8 · 2024-05-03 | 7.8 | 10% | 2024-05-03 |
| CVE-2017-8797The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet fro…Linux · Linux Kernel · 2017-07-02 | – | 9.5% | 2017-07-02 |
| CVE-2017-16410An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and…Adobe · Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and ea… · 2017-12-09 | – | 8.5% | 2017-12-09 |
| CVE-2014-4616Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process…Python · Python · 2017-08-24 | – | 7.8% | 2017-08-24 |
| CVE-2016-9053An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause t…Aerospike · Database Server · CVSS 9.8 · 2017-02-21 | 9.8 | 7.2% | 2017-02-21 |
| CVE-2017-16391An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and…Adobe · Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and ea… · 2017-12-09 | – | 6.7% | 2017-12-09 |
| CVE-2021-38654Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 7.8 · 2021-09-15 | 7.8 | 6.4% | 2021-09-15 |
| CVE-2010-2806Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibl…Freetype · Freetype · 2010-08-19 | – | 5.8% | 2010-08-19 |
| CVE-2019-0906Jet Database Engine Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1703 · CVSS 7.8 · 2019-06-12 | 7.8 | 5.7% | 2019-06-12 |
| CVE-2015-8366Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors…Libraw · Libraw · 2020-01-14 | – | 5.1% | 2020-01-14 |
| CVE-2018-12018The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation because of an integer signedness error fo…Ethereum · Go Ethereum · 2018-07-05 | – | 4.2% | 2018-07-05 |
| CVE-2003-0721Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array…Washington · Pine · 2003-09-12 | – | 4.0% | 2003-09-12 |
| CVE-2020-11881An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated remote attacker to crash the SMB server via modified setup-re…Mikrotik · Routeros · 2020-09-14 | – | 3.8% | 2020-09-14 |
| CVE-2018-7406An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability allows remote attackers to execute arbitrary code. User interaction is required to…Foxitsoftware · Phantompdf · 2018-05-24 | – | 3.7% | 2018-05-24 |
| CVE-2005-0369Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of service (application crash) via a packet with a large (1) descr…Armagetronad · Armagetron · CVSS 5.3 · 2005-02-11 | 5.3 | 3.5% | 2005-02-11 |
| CVE-2021-3121An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue.Golang · Protobuf · 2021-01-11 | – | 3.4% | 2021-01-11 |
| CVE-2020-35636A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() sfh->volume() OOB r…Cgal · CGAL Project · CVSS 10 · 2021-03-04 | 10.0 | 3.4% | 2021-03-04 |
| CVE-2019-17212Buffer overflows were discovered in the CoAP library in Arm Mbed OS 5.14.0. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_p…Mbed · Mbed · 2019-11-05 | – | 3.1% | 2019-11-05 |
| CVE-2020-28601A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::r…Cgal · CGAL · CVSS 10 · 2021-03-04 | 10.0 | 3.0% | 2021-03-04 |
| CVE-2020-25792An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with pair().Sized-Chunks Project · Sized-Chunks · CVSS 7.5 · 2020-09-19 | 7.5 | 2.9% | 2020-09-19 |
| CVE-2020-35628A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser…Cgal · CGAL · CVSS 10 · 2021-03-04 | 10.0 | 2.9% | 2021-03-04 |
| CVE-2020-28636A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser…Cgal · CGAL · CVSS 10 · 2021-03-04 | 10.0 | 2.9% | 2021-03-04 |
| CVE-2022-21310Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and p…Oracle Corporation · MySQL Cluster · CVSS 6.3 · 2022-01-19 | 6.3 | 2.7% | 2022-01-19 |
| CVE-2017-5445A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized…Mozilla · Thunderbird · 2018-06-11 | – | 2.6% | 2018-06-11 |
| CVE-2018-11489The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain Cr…Giflib Project · Giflib · 2018-05-26 | – | 2.5% | 2018-05-26 |
| CVE-2019-1837Cisco Unified Communications Manager Denial of Service VulnerabilityCisco · Cisco Unified Communications Manager · CVSS 5.3 · 2019-04-18 | 5.3 | 2.4% | 2019-04-18 |
| CVE-2018-11490The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain "P…Giflib Project · Giflib · 2018-05-26 | – | 2.4% | 2018-05-26 |
| CVE-2020-28617Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
| CVE-2020-28627Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
| CVE-2020-28621Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
| CVE-2020-28620Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
| CVE-2020-28619Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
| CVE-2020-28618Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
| CVE-2020-28616Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
| CVE-2020-28615Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
| CVE-2020-28625Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
| CVE-2020-28612Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
| CVE-2020-28610Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
| CVE-2020-28608Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
| CVE-2020-28607Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
| CVE-2020-28626Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
| CVE-2020-28623Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
| CVE-2020-28622Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds…CGAL Project · libcgal · CVSS 10 · 2022-04-18 | 10.0 | 2.4% | 2022-04-18 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.