CWE-822: Untrusted Pointer Dereference
The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- foxit phantompdfThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- lcds laquis scadaLCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted...7.8 High
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto...9.8 Critical
- lcds laquis scadaLAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability,...9.8 Critical
- fuji electric v-server, fujielectric v-server firmware +1 moreFuji Electric V-Server 4.0.3.0 and prior, Multiple untrusted pointer dereference vulnerabilities...9.8 Critical
- advantech webaccess, webaccess dashboard, webaccess scada +1 more +3 moreIn Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior,...9.8 Critical
- beckhoff twincat, twincat c\+\+, ics-cert beckhoff twincat plc products +2 moreKernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack...7.8 High
- ics-cert omron cx-supervisor, omron cx-supervisor +1 moreIn Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain...5.3 Medium
- advantech webaccessAn Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8...7.5 High
- advantech webaccessAn Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8...7.5 High