Weaknesses of type CWE-129

324 results

Validação inadequada de índice de array

Ocorre quando o código não valida corretamente se um índice está dentro dos limites válidos do array antes de acessá-lo. Um atacante pode fornecer um índice fora dos limites (negativo ou maior que o tamanho), causando leitura ou escrita em endereços de memória inválidos, resultando em crash, vazamento de dados ou execução de código arbitrário.

Example

Uma API web recebe um parâmetro 'posição' do usuário e acessa um array sem verificar se a posição é válida. Um atacante envia posição=-1 ou posição=999999, lendo/alterando memória adjacente ao array, ou causando segmentation fault.

How to mitigate

Sempre validar que o índice é >= 0 e < tamanho do array antes de usar. Em linguagens de alto nível, preferir iteradores ou métodos nativos que validam automaticamente; em C/C++, usar bounds checking explícito ou bibliotecas como AddressSanitizer durante testes.

CVE-2022-31603MEDIUMNVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned IpSecDxe global dataEPSS 0.2%CVE-2024-26758MEDIUMmd: Don't ignore suspended array in md_check_recovery()EPSS 0.2%CVE-2023-53340HIGHnet/mlx5: Collect command failures data only for known commandsEPSS 0.2%CVE-2026-24238HIGHNVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of thEPSS 0.2%CVE-2023-52728MEDIUMOpen Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString.EPSS 0.2%CVE-2025-23338LOWNVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause an out-of-bounds write by running nvdisasmEPSS 0.2%CVE-2026-93989LOWvLLM through 0.29.0 Cross-Request Logits Corruption via bad_wordsEPSS 0.2%CVE-2024-50291HIGHmedia: dvb-core: add missing buffer index checkEPSS 0.2%CVE-2024-50161HIGHbpf: Check the remaining info_cnt before repeating btf fieldsEPSS 0.2%CVE-2021-47449HIGHice: fix locking for Tx timestamp tracking flushEPSS 0.2%CVE-2026-16849MEDIUMVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.2%CVE-2026-62866MEDIUMDasel: Selector lexer panics on trailing whitespace in `parseCurRune`EPSS 0.2%CVE-2026-49282MEDIUMCapstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashesEPSS 0.2%CVE-2021-1117MEDIUMWindows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an attacker through specific confiEPSS 0.2%CVE-2025-23278HIGHNVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing aEPSS 0.2%CVE-2022-33289MEDIUMImproper validation of array index in ModemEPSS 0.2%CVE-2026-25068MEDIUMalsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer OverflowEPSS 0.2%CVE-2026-46377MEDIUMDasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted stringEPSS 0.2%CVE-2026-40097LOWStep CA affected by an index out of bounds panic in TPM attestation EKU validationEPSS 0.2%CVE-2025-54610MEDIUMOut-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.2%