Weaknesses of type CWE-129

324 results

Validação inadequada de índice de array

Ocorre quando o código não valida corretamente se um índice está dentro dos limites válidos do array antes de acessá-lo. Um atacante pode fornecer um índice fora dos limites (negativo ou maior que o tamanho), causando leitura ou escrita em endereços de memória inválidos, resultando em crash, vazamento de dados ou execução de código arbitrário.

Example

Uma API web recebe um parâmetro 'posição' do usuário e acessa um array sem verificar se a posição é válida. Um atacante envia posição=-1 ou posição=999999, lendo/alterando memória adjacente ao array, ou causando segmentation fault.

How to mitigate

Sempre validar que o índice é >= 0 e < tamanho do array antes de usar. Em linguagens de alto nível, preferir iteradores ou métodos nativos que validam automaticamente; em C/C++, usar bounds checking explícito ou bibliotecas como AddressSanitizer durante testes.

CVE-2021-47548CRITICALethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()EPSS 1.4%CVE-2025-5868HIGHRT-Thread lwp_syscall.c sys_thread_sigprocmask array indexEPSS 1.2%CVE-2022-26100—SAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive. As a result, the SAPCAR process may crash, and thEPSS 1.2%CVE-2026-2006HIGHPostgreSQL missing validation of multibyte character length executes arbitrary codeEPSS 1.1%CVE-2023-28004CRITICAL A CWE-129: Improper validation of an array index vulnerability exists where a specially crafted Ethernet request could result in denial oEPSS 1.1%CVE-2024-31581CRITICALFFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c. EPSS 1.1%CVE-2023-6298MEDIUMApryse iText PdfDocument.java main array indexEPSS 1.1%CVE-2021-21949CRITICALAn improper array index validation vulnerability exists in the JPEG-JFIF Scan header parser functionality of Accusoft ImageGear 19.10. A speEPSS 1.1%CVE-2023-2008HIGHKernel: udmabuf: improper validation of array index leading to local privilege escalationEPSS 1.0%CVE-2026-91101MEDIUMHP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesEPSS 1.0%CVE-2023-20080HIGHCisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service VulnerabilityEPSS 1.0%CVE-2022-31135MEDIUMMaliciously crafted evidence packet may cause denial of serviceEPSS 0.9%CVE-2026-21413CRITICALA heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. AEPSS 0.9%CVE-2025-5866HIGHRT-Thread lwp_syscall.c sys_sigprocmask array indexEPSS 0.9%CVE-2021-35005LOWThis vulnerability allows local attackers to disclose sensitive information on affected installations of TeamViewer. An attacker must first EPSS 0.9%CVE-2026-22859MEDIUMFreeRDP has a heap-buffer-overflow in urb_select_configurationEPSS 0.9%CVE-2022-1237HIGHImproper Validation of Array Index in radareorg/radare2EPSS 0.8%CVE-2026-3083HIGHGStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-29458MEDIUMDuktape 2.6 bug crashes JavaScript putting too many values in valstack.EPSS 0.8%CVE-2025-57052CRITICALcJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote atEPSS 0.7%