Skip to main content

Improper Validation of Array Index


Severity High
Score 7.8/10


Nova 5i pro and Nova 5 smartphones with versions earlier than Versions earlier than have an improper validation of array index vulnerability. The system does not properly validate the input value before use it as an array index when processing certain image information. The attacker tricks the user into installing a malicious application, successful exploit could cause malicious code execution.

  • LOW
  • HIGH
  • NONE
  • HIGH
  • HIGH

CWE-129 - Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.


Advisory Timeline

  • Published