In the Linux kernel, the following vulnerability has been resolved: fbcon: Make sure modelist not set on unregistered c
Memory corruption while processing DDI call with invalid buffer.
Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.
In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG
In the Linux kernel, the following vulnerability has been resolved: ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_POR
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Collect command failures data only for kn
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer A
In the Linux kernel, the following vulnerability has been resolved: fs: jfs: Fix UBSAN: array-index-out-of-bounds in db
Memory corruption while processing audio streaming operations.
Memory corruption when triggering a subsystem crash with an out-of-range identifier.
A vulnerability in the Ollama server version 0.5.11 allows a malicious user to cause a Denial of Service (DoS) attack by
Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, `fiber
The free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session Deletion Requests. An un
In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Fix invalid node index On a sy
NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index val
The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Succe
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Succe
vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, users can
Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.
In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fix UBSAN panic in samsung_clk_init()
Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may
Memory corruption while operating the mailbox in Automotive.
Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successfu
Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt
A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based bu
Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause
Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulne
Improper validation of an array index in the AMD graphics driver software could allow an attacker to pass malformed argu
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause an out-of-bounds write
A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed
Taiko Alethia is an Ethereum-equivalent, permissionless, based rollup designed to scale Ethereum without compromising it
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can be keyed by a signed integer, w
FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266
O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.
In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a poss
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: guard against invalid STA ID on
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix array out-of-bound access in SoC
In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Bounds check struct nfc_target arrays Wh
Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger.
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
In the Linux kernel, the following vulnerability has been resolved: wifi: mac8021: fix possible oob access in ieee80211
BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability all
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWa
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWa
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWa
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWa
Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort functionality of GTKWave 3.3
Frequently Asked Questions
What is CWE-129?
CWE-129 (CWE-129) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-129?
There are 751 CVE records associated with CWE-129 in our database. Of these, 62 are critical severity, 418 are high severity, and 118 are medium severity.
How can I protect against CWE-129 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-129 using AI-powered security agents.
Detect CWE-129 Vulnerabilities
CyberStrike's AI agents automatically detect cwe-129 vulnerabilities across your infrastructure.
Get Started