cve.bz

CWE-822: Untrusted Pointer Dereference, page 2

Filter

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

What the weakness is: CWE-822 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-129 Pointer Manipulation Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-822, as MITRE names them. Credits.

Ask an AI about CWE-822

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-822: Untrusted Pointer Dereference and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/822.html and https://cve.bz/cve/cwe/822?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.5CVE-2026-102710EPSS 0.10%

    In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, built with TX_ENABLE_EVENT_TRACE, the Module Manager lets a user-mode, memory-protected module register any function pointer as the kernel's trace-buffer-full callback, which the kern…

  2. 8.4CVE-2026-102709EPSS 0.1%

    In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the four non-secure-callable secure stack functions of the TrustZone-M ports dereference a thread pointer supplied by the non-secure world without checking that it points to non-secur…

  3. 8.3CVE-2026-58007EPSS 0.1%

    Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

  4. 8.3CVE-2026-58006EPSS 0.1%

    Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

  5. 7.8CVE-2026-91795EPSS 0.1%

    Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid state, resulting in chained read and write access violatio…

  6. 5.1CVE-2026-75432EPSS 0.2%

    An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent(), and Scanner::PushIndentTo() components

  7. 8.5CVE-2026-94403EPSS 0.2%

    A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub_140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be e…

  8. 7.8CVE-2026-25261EPSS 0.1%

    Memory corruption while processing rear sensor IOCTL calls.

  9. 7.8CVE-2025-59607EPSS 0.1%

    Memory Corruption when copying large input data exceeds normal allocation limits.

  10. 6.8CVE-2026-90890EPSS 0.1%

    ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalid…

  11. 6.4CVE-2026-33964EPSS 0.1%

    An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, causing limited information disclosure or denial of service.

  12. 8.2CVE-2026-83939EPSS 0.3%

    Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

  13. 7.8CVE-2026-83498EPSS 0.3%

    Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

  14. 8.8CVE-2026-80083EPSS 0.3%

    Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.

  15. 6.8CVE-2026-78451EPSS 0.4%

    Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.

  16. 8.1CVE-2026-78444EPSS 0.7%

    Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

  17. 6.5CVE-2026-72956EPSS 0.9%

    Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  18. 6.5CVE-2026-72938EPSS 0.9%

    Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  19. 7.8CVE-2026-69900EPSS 0.3%

    Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

  20. 6.4CVE-2026-69874EPSS 0.3%

    Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.

  21. 8.8CVE-2026-69717EPSS 0.8%

    Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.

  22. 5.7CVE-2026-69569EPSS 0.9%

    Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network.

  23. 7.0CVE-2026-69501EPSS 0.3%

    Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

  24. 7.8CVE-2026-69475EPSS 0.3%

    Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

  25. 9.0CVE-2026-67378EPSS 0.7%

    Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.

  26. 5.5CVE-2026-10420EPSS 0.1%

    Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 102d3dc75cf8e58e68e4bea54ae3c803992c91be.

  27. 5.5CVE-2026-82927EPSS 0.1%

    Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 06994e303637512e39062f3e037c222e8448e57e.

  28. 8.8CVE-2026-19442EPSS 0.2%

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the c…

  29. 7.8CVE-2026-18840EPSS 0.2%

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer.

  30. 8.8CVE-2026-9771EPSS 0.1%

    The flash_copy() system call is verified by z_vrfy_flash_copy() in drivers/flash/flash_util.c. On builds with CONFIG_USERSPACE enabled, this handler is the kernel-side trust boundary for a user-mode caller. Prior to the fix it validated on…

  31. 8.4CVE-2026-12364EPSS 0.2%

    The user-space system-call verifier z_vrfy_z_log_msg_static_create() in subsys/logging/log_msg.c was a pure pass-through: it forwarded the caller-supplied source, desc, package, and data arguments directly to the kernel-mode implementation…

  32. 7.8CVE-2026-68810EPSS 0.5%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  33. 7.8CVE-2026-64910EPSS 0.5%

    Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

  34. 5.5CVE-2026-62798EPSS 0.4%

    Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.

  35. 7.8CVE-2026-62737EPSS 0.3%

    Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

  36. 5.5CVE-2026-61360EPSS 0.4%

    Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.

  37. 8.4CVE-2026-8917EPSS 0.2%

    Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. R…

  38. 7.8CVE-2026-45198EPSS 0.2%

    Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control (Firmware) uses a pointer from n…

  39. 7.8CVE-2026-7406EPSS 0.2%

    A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the curre…

  40. 6.8CVE-2026-19023EPSS 0.2%

    Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, wh…

  41. 7.8CVE-2026-24083EPSS 0.1%

    Memory Corruption while processing IOCTL device driver requests with invalid arguments.

  42. 8.2CVE-2026-64286EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU flush_hyp_vcpu() copies the host vCPU context into the hyp's private vCPU on every run. ctxt_to_vcpu…

  43. 9.8CVE-2026-63924EPSS 0.7%

    In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers. Let's recompute nh pointer to make sure…

  44. 8.4CVE-2026-15029EPSS 0.2%

    Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL reque…

  45. 7.8CVE-2026-48340EPSS 0.3%

    Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malici…

  46. 5.5CVE-2026-55138EPSS 0.5%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  47. 7.8CVE-2026-55136EPSS 0.5%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  48. 7.8CVE-2026-50479EPSS 0.3%

    Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

  49. 7.8CVE-2026-50441EPSS 0.3%

    Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

  50. 7.5CVE-2026-50424EPSS 1.2%

    Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network.