592 matches found
CVE-2014-1773
CClipStack::PushClipRect Invalid Array Indexing First, starting with the callstack from the crash with pageheap enabled: ChildEBP RetAddr 0919aac8 6b58459f MSHTML!CWorldTransform::IsAxisAligned 0919ab40 6ba228e9 MSHTML!CDispSurface::CClipStack::PushClipRect+0x1a2 0919aba4 6be25b58...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.1 contains security vulnerabilities. These vulnerabilities stem from the fixedrateidx field in the debugfs file, which does not validate the fixed rate index written there. This can lead to out-of-bound array indexing and damage to adjacent kernel memory...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities arise from the lack of initializing the .num member before accessing the.hws array. This can lead to out-of-bounds array indexing or trigger traps...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
A array indexing vulnerability was discovered in the netfilter subsystem of the Linux kernel. The absence of a certain macro could lead to an incorrect calculation of the offset of the h-nets array, giving attackers the ability to arbitrarily increment/decrement a memory buffer beyond its bounds...
ROS-20261014-73-0166
The vulnerability in the kernel-lt is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20261014-73-0208
The vulnerability in the kernel-lt is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20261014-73-0206
The vulnerability in the kernel-lt is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20261014-73-0232
The vulnerability in the kernel-lt is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Golang X Text Package Heap Buffer Overflow DoS
The vulnerability of the Golang X Text package for text processing is related to unvalidated array indexing. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
ROS-20261005-73-0025
The vulnerability in rsync is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Rocky Linux 9 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_4178)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20234178 advisory. OpenJDK: improper handling of slash characters in URI-to-path conversion 8305312 CVE-2023-22049 OpenJDK: array indexing integer overflow issue 8304468...
CVE-2026-47533
A flaw was found in nvidia-driver. A local attacker with administrative privileges can trigger an array indexing error within the kernel-mode driver layer. Successful exploitation could allow the attacker to execute arbitrary code, escalate system privileges, access sensitive data, or cause a...
Helm Unvalidated Array Indexing
The vulnerability of the package manager for Kubernetes Helm is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20260925-73-0011
The vulnerability of the tuningctlset function in the sound subsystem of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...
ROS-20260924-73-0090
The vulnerability of the getgpioi2cinfo function in the drivers/gpu/drm/amd/display/dc/bios/biosparser2.c driver, which is part of the Direct Rendering Infrastructure DRI graphics card driver for Linux operating systems, is related to unvalidated array indexing. Exploiting this vulnerability coul...
ROS-20260922-73-0126
The vulnerability in golang-x-crypto is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
EUVD-2026-82099
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Validate connected lane counts The connected lane count is used by TX equalization code to index arrays sized by UFSMAXLANES. Reject zero and out-of-range RX or TX lane counts before they can be propagated...
PT-2026-94786
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi ufs core where connected lane counts are not properly validated. These counts are used by the TX equalization code to index arrays sized by UFS MAX LANES...
PT-2026-93455
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array indexing issue exists in the drm/amdgpu component. The adev-isolation array contains one slot per partition; however, rings not assigned to a partition retain the...
DEBIAN-CVE-2026-91958
FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xfdetectmonitors. Attackers can craft a malicious RDP file with an out-of-range selectedmonitors value to trigger out-of-bounds heap read and write...