CWE-822: Untrusted Pointer Dereference
The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +11 more +13 moreUntrusted Pointer Dereference in Display8.4 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +151 more +153 moreUntrusted Pointer Dereference in Video7.3 High
- ami megarac sp-x, megarac spx +1 moreUntrusted Pointer Dereference7.8 High
- ami megarac sp-x, megarac spx +1 moreUntrusted Pointer Dereference in BMC7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreMicrosoft Message Queuing Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows Message Queuing Client (MSMQC) Information Disclosure6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWindows Cryptographic Services Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows Message Queuing Client (MSMQC) Information Disclosure6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWin32k Elevation of Privilege Vulnerability7.8 High
- autodesk autocad, autocad, advance steel and civil 3d, autocad advance steel +8 more +10 moreA maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to...7.8 High
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +16 more +18 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Graphics Remote Code Execution Vulnerability7.8 High
- nvidia gpu display driver, vgpu driver, and cloud gaming driver, virtual gpu +1 moreCVE5.5 Medium
- motorola mtm5000 series firmware, mobile radio, mtm5400 firmware +1 more +3 moreMultiple missing pointer validation checks in trusted execution module in Motorola MTM50008.2 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +19 more +21 moreRemote Procedure Call Information Disclosure Vulnerability7.5 High
- microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2022 version 17.2, visual studio 2022 version 17.4 +4 more +6 moreVisual Studio Elevation of Privilege Vulnerability6.7 Medium
- qualcomm apq8064au firmware, apq8096au firmware, msm8996au firmware +22 more +24 moreUntrusted Pointer Dereference in Automotive9.1 Critical
- advantech webaccess/scada, webaccess\/scada +1 moreCVE-2023-14379.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability5.5 Medium
- nvidia gpu display driver for windows and linux, gpu display driver, cloud gaming +1 more +3 moreNVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized...7.8 High
- microsoft streaming service, windows 10 version 1607, windows 10 version 1809 +15 more +17 moreMicrosoft Streaming Service Elevation of Privilege Vulnerability8.4 High
- qualcomm csra6620 firmware, csra6640 firmware, fastconnect 6200 firmware +124 more +126 moreUntrusted Pointer Dereference in Core6.2 Medium
- nvidia gpu display driverNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...8.8 High
- nvidia vgpu software (guest driver - linux), nvidia cloud gaming (guest driver - linux), virtual gpu +1 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler...8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreClient Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability5.5 Medium
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- microsoft windows 11 version 21h2, windows 11 version 22h2, windows server 2022 +1 more +3 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreWindows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability7.5 High
- ge cimplicityGE CIMPLICITY Untrusted Pointer Dereference7.8 High
- measuresoft scadapro serverMeasuresoft ScadaPro Server Untrusted Pointer Dereference7.8 High
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...7.3 High
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 20226.5 Medium
- codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +26 more +28 moreUntrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.7.1 High
- fuji electric tellus lite v-simulator, v-server lite, fujielectric v-server +1 more +3 moreFuji Electric Tellus Lite V-Simulator untrusted pointer dereference7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- luxion keyshot, datakit crosscadware, siemens solid edge se2020 firmware +1 more +3 moreDatakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr...7.8 High
- siemens solid edge se2020, solid edge se2021 +1 moreA vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge...7.8 High
- facebook hhvmThe unserialize() function supported a type code, "S", which was meant to be supported only for...7.5 High
- autodesk luxion keyshot, luxion keyshot, keyshot network rendering +4 more +6 moreLuxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion...7.8 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw...3.3 Low
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization...7.8 High
- omron cx-one, cx-position, cx-protocol +1 more +3 moreOmron CX-One8.8 High
- delta electronics tpeditorAn untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior)...7.8 High
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All Versions < V13.1.0), JT2Go (V 13.1.0),...8.8 High
- deltaww cncsoft-bDelta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while...7.8 High
- deltaww dopsoftDelta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while...7.8 High
- microsoft perl-dbi, canonical ubuntu linux, debian linux +3 more +5 moreAn untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able...5.5 Medium
- Show moreLoading…