CWE-822— Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.— MITRE CWE catalog

381 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-822page 5 of 8

CVE-2024-43516HIGHCVSS 7.8EG 7.8
2024-10-08
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2024-21455HIGHCVSS 7.8EG 7.8
2024-10-07
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.
CVE-2024-33038HIGHCVSS 7.8EG 7.8
2024-09-02
Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.
CVE-2024-38187HIGHCVSS 7.8EG 7.8
2024-08-13
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-38185HIGHCVSS 7.8EG 7.8
2024-08-13
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-0091HIGHCVSS 7.8EG 7.8
2024-06-13
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, informa…
CVE-2023-40472HIGHCVSS 7.8EG 7.8
2024-05-03
PDF-XChange Editor JavaScript String Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction …
CVE-2023-40471HIGHCVSS 7.8EG 7.8
2024-05-03
PDF-XChange Editor App Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to…
CVE-2023-39501HIGHCVSS 7.8EG 7.8
2024-05-03
PDF-XChange Editor OXPS File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction …
CVE-2023-35711HIGHCVSS 7.8EG 7.8
2024-05-03
Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interactio…
CVE-2023-34311HIGHCVSS 7.8EG 7.8
2024-05-03
Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to…
CVE-2023-34309HIGHCVSS 7.8EG 7.8
2024-05-03
Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to…
CVE-2023-34301HIGHCVSS 7.8EG 7.8
2024-05-03
Ashlar-Vellum Cobalt CO File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interactio…
CVE-2023-34300HIGHCVSS 7.8EG 7.8
2024-05-03
Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interactio…
CVE-2023-27342HIGHCVSS 7.8EG 7.8
2024-05-03
PDF-XChange Editor EMF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction i…
CVE-2024-23136HIGHCVSS 7.8EG 7.8
2024-02-22
A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current …
CVE-2024-21346HIGHCVSS 7.8EG 7.8
2024-02-13
Win32k Elevation of Privilege Vulnerability
CVE-2023-34333HIGHCVSS 7.8EG 7.8
2024-01-09
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrit…
CVE-2023-34332HIGHCVSS 7.8EG 7.8
2024-01-09
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity…
CVE-2024-20682HIGHCVSS 7.8EG 7.8
2024-01-09
Windows Cryptographic Services Remote Code Execution Vulnerability
CVE-2023-36011HIGHCVSS 7.8EG 7.8
2023-12-12
Win32k Elevation of Privilege Vulnerability
CVE-2023-41139HIGHCVSS 7.8EG 7.8
2023-11-23
A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
CVE-2023-36045HIGHCVSS 7.8EG 7.8
2023-11-14
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2023-25515HIGHCVSS 7.8EG 7.8
2023-06-23
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure…
CVE-2022-42418HIGHCVSS 7.8EG 7.8
2023-01-26
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malic…
CVE-2022-42396HIGHCVSS 7.8EG 7.8
2023-01-26
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malic…
CVE-2022-2002HIGHCVSS 7.8EG 7.8
2022-12-07
GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code.
CVE-2022-2894HIGHCVSS 7.8EG 7.8
2022-08-31
Measuresoft ScadaPro Server (All Versions) uses unmaintained ActiveX controls. The controls may allow seven untrusted pointer deference instances while processing a specific project file.
CVE-2021-38401HIGHCVSS 7.8EG 7.8
2021-12-20
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code and cause the application to crash.
CVE-2021-31504HIGHCVSS 7.8EG 7.8
2021-08-03
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 (package 16.6.3.134). User interaction is required to exploit this vulnerability in that the target m…
CVE-2021-31500HIGHCVSS 7.8EG 7.8
2021-06-15
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page …
CVE-2021-31481HIGHCVSS 7.8EG 7.8
2021-06-15
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page …
CVE-2021-27496HIGHCVSS 7.8EG 7.8
2021-05-27
Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied data when parsing PRT files. This could lead to pointer der…
CVE-2020-26997HIGHCVSS 7.8EG 7.8
2021-04-22
A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplie…
CVE-2021-22649HIGHCVSS 7.8EG 7.8
2021-02-23
Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 have multiple NULL pointer dereference issues while proce…
CVE-2020-27003HIGHCVSS 7.8EG 7.8
2021-02-09
A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing TIFF files. This could lead to po…
CVE-2020-27288HIGHCVSS 7.8EG 7.8
2021-01-26
An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.
CVE-2020-27289HIGHCVSS 7.8EG 7.8
2021-01-11
Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code.
CVE-2020-27277HIGHCVSS 7.8EG 7.8
2021-01-11
Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code.
CVE-2019-13334HIGHCVSS 7.8EG 7.8
2020-02-08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op…
CVE-2018-19029HIGHCVSS 7.8EG 7.8
2019-02-05
LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote code execution, data exfiltration, or cause a system crash.
CVE-2018-7502HIGHCVSS 7.8EG 7.8
2018-03-23
Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerabil…
CVE-2026-43598HIGHCVSS 7.7EG 7.7
2026-10-06
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code executi…
CVE-2026-105578HIGHCVSS 7.5EG 7.5
2026-11-10
Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.
CVE-2026-50424HIGHCVSS 7.5EG 7.5
2026-07-14
Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network.
CVE-2024-26254HIGHCVSS 7.5EG 7.5
2024-04-09
Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability
CVE-2023-36596HIGHCVSS 7.5EG 7.5
2023-10-10
Remote Procedure Call Information Disclosure Vulnerability
CVE-2023-21677HIGHCVSS 7.5EG 7.5
2023-01-10
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2020-1899HIGHCVSS 7.5EG 7.5
2021-03-11
The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. This type code allowed arbitrary memory addresses to be accessed as if they were static StringData objects. This issue affec…
CVE-2017-16728HIGHCVSS 7.5EG 7.5
2018-01-05
An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the program to use an invalid memory address, resulting in a program…

Map vulnerabilities like CWE-822 to your infrastructure

EchelonGraph correlates every CVE — across CWE-822 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →