Weaknesses of type CWE-129

324 results

Validação inadequada de índice de array

Ocorre quando o código não valida corretamente se um índice está dentro dos limites válidos do array antes de acessá-lo. Um atacante pode fornecer um índice fora dos limites (negativo ou maior que o tamanho), causando leitura ou escrita em endereços de memória inválidos, resultando em crash, vazamento de dados ou execução de código arbitrário.

Example

Uma API web recebe um parâmetro 'posição' do usuário e acessa um array sem verificar se a posição é válida. Um atacante envia posição=-1 ou posição=999999, lendo/alterando memória adjacente ao array, ou causando segmentation fault.

How to mitigate

Sempre validar que o índice é >= 0 e < tamanho do array antes de usar. Em linguagens de alto nível, preferir iteradores ou métodos nativos que validam automaticamente; em C/C++, usar bounds checking explícito ou bibliotecas como AddressSanitizer durante testes.

CVE-2024-34048CRITICALO-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.EPSS 0.6%CVE-2024-45569CRITICALImproper Validation of Array Index in WLAN Host CommunicationEPSS 0.6%CVE-2025-65562HIGHThe free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session Deletion Requests. An unauthenticated remoteEPSS 0.6%CVE-2020-17394MEDIUMThis vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4. An attackEPSS 0.6%CVE-2020-17401MEDIUMThis vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop 15.1.4. An attacEPSS 0.6%CVE-2024-34050HIGHOpen Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64(b[2])<<16 | uint64(b[1])<<8EPSS 0.5%CVE-2026-45799HIGHWire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding serviceEPSS 0.5%CVE-2020-8875HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker muEPSS 0.5%CVE-2026-41643HIGHGoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATEEPSS 0.5%CVE-2020-17400HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must firEPSS 0.5%CVE-2020-17399HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must firEPSS 0.5%CVE-2022-33256CRITICALImproper validation of array index in Multi-mode call processorEPSS 0.5%CVE-2020-17398MEDIUMThis vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.4. An attacker must fiEPSS 0.5%CVE-2024-38623HIGHfs/ntfs3: Use variable length array instead of fixed sizeEPSS 0.5%CVE-2026-65652HIGHtemporalio/tchannel-go malformed checksum type causes process terminationEPSS 0.5%CVE-2026-31966MEDIUMHTSlib CRAM reader has out-of-bounds read due to improper validation of inputEPSS 0.5%CVE-2020-8876MEDIUMThis vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.2-47123. An attacker mEPSS 0.5%CVE-2025-48075HIGHFiber panics when fiber.Ctx.BodyParser parses invalid range indexEPSS 0.5%CVE-2025-1975HIGHImproper Validation of Array Index in ollama/ollamaEPSS 0.5%CVE-2026-22879HIGHA heap-based buffer overflow vulnerability exists in the vtkDICOMItem::FindDataElementOrInsert functionality of vtk-dicom (version(s): 9.5.2EPSS 0.5%