CWE-1285 · 53 records

Improper Validation of Specified Index, Position, or Offset in Input

CVEs in this class

53 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2025-3357No exploit	IBM Tivoli Monitoring code executionibm · tivoli monitoring · CWE-1285 pre-auth RCE	Critical9.8	—	1.1%	May 28, 2025
36Monitor	CVE-2025-7848No exploit	Missing input check in lvpict.cpp used in NI LabVIEWni · labview · CWE-1285 RCE	High8.5	—	6.0%	Jul 29, 2025
36Monitor	CVE-2026-33557No exploit	Apache Kafka: Missing JWT token validation in OAUTHBEARER authenticationapache · kafka · CWE-1285 Pre-auth	Critical9.1	—	0.8%	Apr 20, 2026
36Monitor	CVE-2025-3755No exploit	Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU modulemitsubishi electric corporation · melsec iq-f series fx5u-32mt/es · CWE-1285 Pre-auth	Critical9.1	—	0.8%	May 29, 2025
35Monitor	CVE-2026-12681No exploit	Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Google go-attestation.google · go-attestation · CWE-1285 Pre-auth	High8.9	—	0.2%	Jun 24, 2026
35Monitor	CVE-2024-36342No exploit	Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execuamd · amd ryzen™ 4000 series mobile processors with radeon™ graphics · CWE-1285 RCE	High8.8	—	0.1%	Sep 6, 2025
34Monitor	CVE-2025-9189No exploit	Out Of Bounds Write when parsing a DSB file with Digilent DASYLabni · dasylab · CWE-1285 RCE	High8.5	—	0.2%	Sep 2, 2025
34Monitor	CVE-2025-7849No exploit	Memory Corruption Issue in NI LabVIEW due to improper error handlingni · labview · CWE-1285 RCE	High8.5	—	0.2%	Jul 29, 2025
34Monitor	CVE-2025-57777No exploit	Out Of Bounds Write in displ2.dll when parsing a DSB file with Digilent DASYLabni · dasylab · CWE-1285 RCE	High8.5	—	0.2%	Sep 2, 2025
34Monitor	CVE-2025-57774No exploit	Out Of Bounds Write of invalid data when parsing a DSB file with Digilent DASYLabni · dasylab · CWE-1285 RCE	High8.5	—	0.2%	Sep 2, 2025
34Monitor	CVE-2025-57776No exploit	Out Of Bounds Write to invalid address when parsing a DSB file with Digilent DASYLabni · dasylab · CWE-1285 RCE	High8.5	—	0.2%	Sep 2, 2025
34Monitor	CVE-2025-57778No exploit	Out Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLabni · dasylab · CWE-1285 RCE	High8.5	—	0.2%	Sep 2, 2025
34Monitor	CVE-2025-57775No exploit	Heap-based Buffer Overflow when parsing a DSB file with Digilent DASYLabni · dasylab · CWE-1285 RCE	High8.5	—	0.2%	Sep 2, 2025
34Monitor	CVE-2026-18485No exploit	Local Privilege Escalation in NI-PALni · ni-pal · CWE-1285 RCE Local privilege escalation	High8.5	—	0.1%	Aug 5, 2026
33Monitor	CVE-2024-10494No exploit	Out of bounds read in HeapObjMapImpl.cpp in NI LabVIEWni · labview · CWE-1285 RCE	High8.4	—	0.1%	Dec 10, 2024
33Monitor	CVE-2024-10495No exploit	Out of bounds read when loading the font table in fontmgr.cpp in NI LabVIEWni · labview · CWE-1285 RCE	High8.4	—	0.1%	Dec 10, 2024
33Monitor	CVE-2024-10496No exploit	Out of bounds read in BuildFontMap in fontmgr.cpp in NI LabVIEWni · labview · CWE-1285 RCE	High8.4	—	0.1%	Dec 10, 2024
33Monitor	CVE-2026-20524No exploit	In apu, there is a possible memory corruption due to improper input validation.mediatek · mt6899 firmware · CWE-1285 Local privilege escalation	High8.4	—	0.1%	Oct 5, 2026
33Monitor	CVE-2026-8036No exploit	Local privilege escalation in NI-PALni · ni-pal · CWE-1285 Local privilege escalation	High8.4	—	0.1%	Jun 2, 2026
32Monitor	CVE-2022-21821No exploit	NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would requinvidia · cuda toolkit · CWE-1285 RCE	High7.8	—	2.0%	Mar 29, 2022
32Monitor	CVE-2026-107821Proof of concept	MariaDB: insufficient validation of binary frm data when opening a tablemariadb · mariadb · CWE-1285	High8.0	—	1.2%	Oct 9, 2026
32Monitor	GHSA-c85w-x26q-ch87No exploit	Formwork improperly validates input of User role preventing site and panel availabilityPackagist · getformwork/formwork · CWE-1285	High8.2	—	—	Mar 1, 2025
31Monitor	CVE-2024-23612No exploit	Improper Error Handling Issue in LabVIEWni · labview · CWE-1285 RCE	High7.8	—	0.6%	Mar 11, 2024
31Monitor	CVE-2024-23609No exploit	Improper Error Handling Issue in LabVIEWni · labview · CWE-1285 RCE	High7.8	—	0.5%	Mar 11, 2024
31Monitor	CVE-2025-20796No exploit	In imgsys, there is a possible out of bounds write due to improper input validation.google · android · CWE-1285 Local privilege escalation	High7.8	—	0.0%	Jan 6, 2026

CVE-2025-3357
39Monitor
IBM Tivoli Monitoring code execution
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
ibm · tivoli monitoringMay 28, 2025
CVE-2025-7848
36Monitor
Missing input check in lvpict.cpp used in NI LabVIEW
HighCVSS 8.5No exploitEPSS 6%
- RCE
ni · labviewJul 29, 2025
CVE-2026-33557
36Monitor
Apache Kafka: Missing JWT token validation in OAUTHBEARER authentication
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
apache · kafkaApr 20, 2026
CVE-2025-3755
36Monitor
Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU module
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
mitsubishi electric corporation · melsec iq-f series fx5u-32mt/esMay 29, 2025
CVE-2026-12681
35Monitor
Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Google go-attestation.
HighCVSS 8.9No exploitEPSS 0%
- Pre-auth
google · go-attestationJun 24, 2026
CVE-2024-36342
35Monitor
Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execu
HighCVSS 8.8No exploitEPSS 0%
- RCE
amd · amd ryzen™ 4000 series mobile processors with radeon™ graphicsSep 6, 2025
CVE-2025-9189
34Monitor
Out Of Bounds Write when parsing a DSB file with Digilent DASYLab
HighCVSS 8.5No exploitEPSS 0%
- RCE
ni · dasylabSep 2, 2025
CVE-2025-7849
34Monitor
Memory Corruption Issue in NI LabVIEW due to improper error handling
HighCVSS 8.5No exploitEPSS 0%
- RCE
ni · labviewJul 29, 2025
CVE-2025-57777
34Monitor
Out Of Bounds Write in displ2.dll when parsing a DSB file with Digilent DASYLab
HighCVSS 8.5No exploitEPSS 0%
- RCE
ni · dasylabSep 2, 2025
CVE-2025-57774
34Monitor
Out Of Bounds Write of invalid data when parsing a DSB file with Digilent DASYLab
HighCVSS 8.5No exploitEPSS 0%
- RCE
ni · dasylabSep 2, 2025
CVE-2025-57776
34Monitor
Out Of Bounds Write to invalid address when parsing a DSB file with Digilent DASYLab
HighCVSS 8.5No exploitEPSS 0%
- RCE
ni · dasylabSep 2, 2025
CVE-2025-57778
34Monitor
Out Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLab
HighCVSS 8.5No exploitEPSS 0%
- RCE
ni · dasylabSep 2, 2025
CVE-2025-57775
34Monitor
Heap-based Buffer Overflow when parsing a DSB file with Digilent DASYLab
HighCVSS 8.5No exploitEPSS 0%
- RCE
ni · dasylabSep 2, 2025
CVE-2026-18485
34Monitor
Local Privilege Escalation in NI-PAL
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
ni · ni-palAug 5, 2026
CVE-2024-10494
33Monitor
Out of bounds read in HeapObjMapImpl.cpp in NI LabVIEW
HighCVSS 8.4No exploitEPSS 0%
- RCE
ni · labviewDec 10, 2024
CVE-2024-10495
33Monitor
Out of bounds read when loading the font table in fontmgr.cpp in NI LabVIEW
HighCVSS 8.4No exploitEPSS 0%
- RCE
ni · labviewDec 10, 2024
CVE-2024-10496
33Monitor
Out of bounds read in BuildFontMap in fontmgr.cpp in NI LabVIEW
HighCVSS 8.4No exploitEPSS 0%
- RCE
ni · labviewDec 10, 2024
CVE-2026-20524
33Monitor
In apu, there is a possible memory corruption due to improper input validation.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
mediatek · mt6899 firmwareOct 5, 2026
CVE-2026-8036
33Monitor
Local privilege escalation in NI-PAL
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
ni · ni-palJun 2, 2026
CVE-2022-21821
32Monitor
NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would requi
HighCVSS 7.8No exploitEPSS 2%
- RCE
nvidia · cuda toolkitMar 29, 2022
CVE-2026-107821
32Monitor
MariaDB: insufficient validation of binary frm data when opening a table
HighCVSS 8.0Proof of conceptEPSS 1%
mariadb · mariadbOct 9, 2026
GHSA-c85w-x26q-ch87
32Monitor
Formwork improperly validates input of User role preventing site and panel availability
HighCVSS 8.2No exploit
Packagist · getformwork/formworkMar 1, 2025
CVE-2024-23612
31Monitor
Improper Error Handling Issue in LabVIEW
HighCVSS 7.8No exploitEPSS 0%
- RCE
ni · labviewMar 11, 2024
CVE-2024-23609
31Monitor
Improper Error Handling Issue in LabVIEW
HighCVSS 7.8No exploitEPSS 0%
- RCE
ni · labviewMar 11, 2024
CVE-2025-20796
31Monitor
In imgsys, there is a possible out of bounds write due to improper input validation.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidJan 6, 2026

All vulnerability classes