CVE-2022-46152

OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The function "cleanupshmrefs" is called by both "entryinvokecommand" and "entryopensession". The commands...

CVE-2022-46152 OP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs function

OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The function cleanupshmrefs is called by both entryinvokecommand and entryopensession. The commands...

CVE-2021-37062

There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory overflow and information leakage...

CVE-2020-28589: Improper Validation of Array Index

An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

Buffer overflow

Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2020-11307

CVE-2020-11307 describes a buffer overflow in Qualcomm’s modem stack due to an improper array index check when copying into a buffer in multiple Snapdragon family components (Auto, Compute, Connectivity, CIoT, Industrial IoT, Wearables). The root cause is an input/length handling issue that can l...

CVE-2020-11307: Improper Validation of Array Index

Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2021-22374

There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause stability risks...

PT-2021-28491

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.32 Description A potential security issue exists where an array index is improperly used. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2021-24487

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.11.16 Description: A potential security issue exists where an array index is improperly used. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2021-24497

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.32 Description: A potential security issue exists where an array index is improperly used. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2019-4421

Name of the Vulnerable Software and Affected Versions Huawei Nova 5i pro versions earlier than 9.1.1.190C00E190R6P2 Huawei Nova 5 versions earlier than 9.1.1.175C00E170R3P2 Description The issue is related to improper validation of array index when processing certain image information. This could...

CVE-2019-5666: Improper Validation of Array Index

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys create context command DDI DxgkDdiCreateContext in which the product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index...

PT-2018-3989

Name of the Vulnerable Software and Affected Versions FFMPEG version 4.1 Description The issue is related to improper validation of array indices in the libavcodec/cbs av1.c component of the FFmpeg library. This can be exploited via a specially crafted AV1 file, potentially leading to a denial of...

CVE-2017-0322: Improper Validation of Array Index

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler where a value passed from a user to the driver is not correctly validated and used as the index to an array, leading to denial of service or potential escalation of privileges...

Android Privilege Escalation

The vulnerability of the drivers/media/platform/msm/camerav2/isp/msmispaxiutil.c file of the Qualcomm Android operating system lies in the improper way in which array indices are checked. Exploiting this vulnerability allows a remote attacker to enhance their privileges through a specially create...

PT-2011-2786

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2002 SP3, 2003 SP3, and 2007 SP2 Office 2004 for Mac Excel Viewer version SP2 Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats version SP2 Description A stack-based buffer overflow issue allo...