349
Reference Description
https://www.cve.org/CVERecord?id=CVE-2005-0369
CVE-2001-1009 negative array index as argument to POP LIST command
https://www.cve.org/CVERecord?id=CVE-2001-1009
CVE-2003-0721 Integer signedness error leads to negative array index
https://www.cve.org/CVERecord?id=CVE-2003-0721
CVE-2004-1189 product does not properly track a count and a maximum number, which can
lead to resultant array index overflow.
https://www.cve.org/CVERecord?id=CVE-2004-1189
CVE-2007-5756 Chain: device driver for packet-capturing software allows access to an
unintended IOCTL with resultant array index error.
https://www.cve.org/CVERecord?id=CVE-2007-5756
CVE-2005-2456 Chain: array index error (CWE-129) leads to deadlock (CWE-833)
https://www.cve.org/CVERecord?id=CVE-2005-2456
Affected Resources
• Memory
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 738 CERT C Secure Coding Standard (2008) Chapter 5 -
Integers (INT)
734 2342
MemberOf 740 CERT C Secure Coding Standard (2008) Chapter 7 -
Arrays (ARR)
734 2344
MemberOf 802 2010 Top 25 - Risky Resource Management 800 2354
MemberOf 867 2011 Top 25 - Weaknesses On the Cusp 900 2372
MemberOf 872 CERT C++ Secure Coding Section 04 - Integers (INT) 868 2374
MemberOf 874 CERT C++ Secure Coding Section 06 - Arrays and the
STL (ARR)
868 2375
MemberOf 884 CWE Cross-section 884 2567
MemberOf 970 SFP Secondary Cluster: Faulty Buffer Access 888 2405
MemberOf 1131 CISQ Quality Measures (2016) - Security 1128 2442
MemberOf 1160 SEI CERT C Coding Standard - Guidelines 06. Arrays
(ARR)
1154 2457
MemberOf 1179 SEI CERT Perl Coding Standard - Guidelines 01. Input
Validation and Data Sanitization (IDS)
1178 2465
MemberOf 1308 CISQ Quality Measures - Security 1305 2485
MemberOf 1340 CISQ Data Protection Measures 1340 2590
MemberOf 1399 Comprehensive Categorization: Memory Safety 1400 2525
Notes
Relationship
This weakness can precede uncontrolled memory allocation (CWE-789) in languages that
automatically expand an array when an index is used that is larger than the size of the array,
such as JavaScript.
Theoretical
An improperly validated array index might lead directly to the always-incorrect behavior of
"access of array using out-of-bounds index."
Taxonomy Mappings
CWE Version 4.14
CWE-129: Improper Validation of Array Index
CWE-129: Improper Validation of Array Index