Cyber Resilience

CWE · MITRE source

CWE-129Improper Validation of Array Index

Abstraction: Variant · CVEs in our corpus: 618

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

Last updated: 20 August 2026 13:14 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 1 mapping(s) from 1 framework(s): CAPEC 1 (partial)

See the full cumulative-coverage rollup →

OWASP Top 10 for Web (2025)

This weakness contributes to A05:2025 Injection.

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.PS-06
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2022-48503 KEV 9.28.80.03212023-08-14
CVE-2023-0755 8.39.80.11782023-02-23
CVE-2016-9053 8.19.80.07252017-02-21
CVE-2015-8366 7.99.80.04942020-01-14
CVE-2019-17212 7.89.80.03062019-11-05
CVE-2020-28601 7.89.80.02902021-03-04
CVE-2020-28636 7.89.80.02882021-03-04
CVE-2020-35628 7.89.80.02882021-03-04
CVE-2020-35636 7.89.80.03292021-03-04
CVE-2019-15784 7.79.80.01972019-08-29
CVE-2020-12022 7.69.80.01672020-05-08
CVE-2021-21833 7.69.80.01432021-06-11
CVE-2024-24563 7.69.80.01542024-02-07
CVE-2021-47548 7.69.80.01362024-05-24
CVE-2016-10386 7.59.80.00962017-08-18
CVE-2014-10048 7.59.80.01252018-04-18
CVE-2014-9989 7.59.80.01252018-04-18
CVE-2014-9990 7.59.80.01252018-04-18
CVE-2016-10454 7.59.80.01252018-04-18
CVE-2019-10533 7.59.80.00912019-11-06
CVE-2019-2258 7.59.80.00912019-11-06
CVE-2019-2325 7.59.80.00912019-11-06
CVE-2019-10511 7.59.80.00912019-12-12
CVE-2019-2320 7.59.80.00912019-12-12
CVE-2019-10611 7.59.80.00902020-01-21