CyberSecBulletin

Incorrect Access of Indexable Resource

CWE-118

The product does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed using an index or pointer, such as memory or files.

We track 5 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.9.

Latest Incorrect Access of Indexable Resource vulnerabilities

  • 7.5 High severity

    HarmonyOS: Incorrect Access of Indexable Resource

    CVE-2025-54628Huawei

    Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.

  • 7.8 High severity

    GTKWave: Incorrect Access of Indexable Resource

    CVE-2023-37923GTKWave

    Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vu

  • 7.8 High severity

    GTKWave: Incorrect Access of Indexable Resource

    CVE-2023-37922GTKWave

    Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vu

  • 7.8 High severity

    GTKWave: Incorrect Access of Indexable Resource

    CVE-2023-37921GTKWave

    Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vu

  • 8.8 High severity

    ADMesh: Improper Validation of Array Index

    CVE-2022-38072ADMeshEPSS 1.06%

    An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to tri