CWE-822: Untrusted Pointer Dereference
The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- gnu grub2Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address6.4 Medium
- kvcache-ai mooncakeMooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport9.3 Critical
- eclipse foundation threadxAttacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION`...8.5 High
- eclipse foundation threadxImproper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC)...8.4 High
- eclipse foundation threadxAn unprivileged, memory-protected ThreadX module can have the kernel read and write memory at...8.5 High
- altera trusted firmwareUnchecked SDM mailbox response address enables EL3 secure-memory corruption8.3 High
- altera trusted firmwareAltera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption8.3 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerability7.8 High
yaml-cppDebianAn issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src...5.1 Medium- colorful igamecenterColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference9.3 Critical
- qualcomm cologne firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +22 more +24 moreUntrusted Pointer Dereference in Camera6.7 Medium
- qualcomm cologne firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +12 more +14 moreUntrusted Pointer Dereference in Windows Compute7.8 High
- asrock polychrome sync/rgb for mb, polychrome sync/rgb for vga +1 moreASRock｜ASRock Polychrome SYNC/RGB software utility - Untrusted Pointer Dereference6.8 Medium
- samsung exynos 1580 firmwareAn issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted...6.4 Medium
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +7 more +9 moreWindows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 26h1, windows 11 26h1 +1 moreWindows Secure Kernel Mode Elevation of Privilege Vulnerability8.2 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreMicrosoft Windows SCSI Class System File Elevation of Privilege Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows server 2019, windows server 2019 (server core installation) +4 more +6 moreMicrosoft Failover Cluster Remote Code Execution Vulnerability8.1 High
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 moreMicrosoft Office PowerPoint Information Disclosure Vulnerability6.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +4 more +6 moreMicrosoft Office PowerPoint Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows ALPC Elevation of Privilege Vulnerability8.2 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +11 more +13 moreKernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Print Spooler Components Denial of Service Vulnerability5.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Remote Desktop Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWindows Hyper-V Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2019 (cu 32), sql server 2019 (gdr), sql server 2022 (cu 26) +6 more +8 moreMicrosoft SQL Server Remote Code Execution Vulnerability9.0 Critical
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreWindows Secure Kernel Mode Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Group Policy Elevation of Privilege Vulnerability8.0 High
- samsung open source mtowerUntrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer...5.5 Medium
- samsung open source mtowerUntrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer...5.5 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.2 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.2 High
- zephyrproject zephyrMissing device-pointer validation in flash_copy() syscall allows userspace privilege escalation8.8 High
- zephyrproject zephyrMissing user-space pointer validation in logging syscall z_log_msg_static_create allows kernel memory disclosure and denial of service8.4 High
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows GDI Information Disclosure Vulnerability5.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +7 more +9 moreWin32k Information Disclosure Vulnerability5.5 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- asus ai suite3, gpu tweak iii, gputweakii +1 more +3 moreUntrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL...8.4 High
- imagination technologies graphics ddkGPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted7.8 High
- autodesk advance steel, autocad, autocad lt +9 more +11 moreBMP File Parsing Untrusted Pointer Dereference in certain Autodesk products7.8 High
- hdfgroup hdf5HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets6.8 Medium
- qualcomm qam8295p firmware, qca6696 firmware, sa8295p firmware +1 more +3 moreUntrusted Pointer Dereference in Automotive Security7.8 High
- linux, linux kernel +1 moreKVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU8.2 High
- linux, linux kernel +1 moreipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()9.8 Critical
- asus business manager, system control interface, system control interface v3 +1 more +3 moreUntrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface,...8.4 High
- adobe bridgeBridge | Untrusted Pointer Dereference (CWE-822)7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- Show moreLoading…