CWE-822

Untrusted Pointer Dereference

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

212 vulnerabilities with CWE-822
CVE-2023-34309 HIGH
Ashlar-Vellum Cobalt - Remote Code Execution via CO File Parsing
CVSS 7.8
CVE-2023-34301 HIGH
Ashlar-Vellum Cobalt < 12.4.1204.200 - Remote Code Execution via CO File Parsing
CVSS 7.8
CVE-2023-34300 HIGH
Ashlar-Vellum Cobalt - Remote Code Execution via XE File Parsing
CVSS 7.8
CVE-2023-27342 HIGH
PDF-XChange Editor - Remote Code Execution via EMF File Parsing
CVSS 7.8
CVE-2023-43532 HIGH
Qualcomm FastConnect and Snapdragon Firmware - Memory Corruption via ACPI Config
CVSS 8.4
CVE-2023-43518 HIGH
Product <Version - Memory Corruption
CVSS 7.3
CVE-2023-34333 HIGH
AMI MegaRAC SP-X 12-12.7 - Unauthenticated Memory Corruption via Untrusted Pointer Dereference
CVSS 7.8
CVE-2023-34332 HIGH
AMI MegaRAC SP-X 12-12.7 - Unauthenticated Memory Corruption via Untrusted Pointer Dereference
CVSS 7.8
CVE-2023-36011 HIGH
Windows 10 1507-23H2 and Windows Server 2012-2022 - Elevation of Privilege via Win32k Untrusted Pointer Dereference
CVSS 7.8
CVE-2023-41139 HIGH
Autodesk AutoCAD <2024 - Code Injection
CVSS 7.8
CVE-2023-36045 HIGH
Microsoft 365 Apps and Office - Remote Code Execution via Graphics Component
CVSS 7.8
CVE-2023-36033 HIGH KEV
Windows DWM Core Library - Privilege Escalation
CVSS 7.8
CVE-2023-31023 MEDIUM
NVIDIA Display Driver - Memory Corruption
CVSS 5.5
CVE-2023-36596 HIGH
Product <Version> - Info Disclosure
CVSS 7.5
CVE-2023-36759 MEDIUM
Visual Studio - Privilege Escalation
CVSS 6.7
CVE-2023-21643 CRITICAL
Qualcomm Automotive Firmware - Memory Corruption
CVSS 9.1
CVE-2023-1437 CRITICAL
Advantech WebAccess/SCADA <9.1.4 - Memory Corruption
CVSS 9.8
CVE-2023-32040 MEDIUM
Microsoft PostScript and PCL6 Class Printer Driver - Info Disclosure
CVSS 5.5
CVE-2023-25515 HIGH
NVIDIA GPU Display Driver 470-474.44, 470-470.199.02 - Untrusted Pointer Dereference
CVSS 7.8
CVE-2023-29360 HIGH KEV
Microsoft Streaming Service - Privilege Escalation
CVSS 8.4
CVE-2023-0184 HIGH
NVIDIA GPU Display Driver - DoS/Esc Priv/Info Disclosure/Data Tampe...
CVSS 8.8
CVE-2023-0189 HIGH
NVIDIA Virtual GPU < 11.12 - Untrusted Pointer Dereference
CVSS 8.8
CVE-2023-23394 MEDIUM
Windows 10 1507-22H2 and Windows 11 21H2-22H2 - Information Disclosure via CSRSS Untrusted Pointer Dereference
CVSS 5.5
CVE-2023-21768 HIGH
Windows Ancillary Function Driver - Privilege Escalation
CVSS 7.8
CVE-2023-21677 HIGH
Windows Internet Key Exchange (IKE) Extension - Denial of Service via Untrusted Pointer Dereference
CVSS 7.5
Details
Vulnerabilities 212
Links
MITRE CWE Entry Search this CWE With Exploits