Common Weakness Enumeration

    CWE Definition / CWE-129

    CWE-129: Improper Validation of Array Index

    The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-1285: Improper Validation of Specified Index, Position, or Offset in Input

    CWE-20: Improper Input Validation

    CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CWE-823: Use of Out-of-range Pointer Offset

    CWE-789: Memory Allocation with Excessive Size Value