Untrusted Pointer Dereference
CWE-822
The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
We track 81 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.1. 5 have been exploited in real attacks.
Latest Untrusted Pointer Dereference vulnerabilities
- 7.8 High severity
Microsoft Windows Untrusted Pointer Dereference Exploited
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulati
- 9.1 Critical severity
Connext Professional: Untrusted Pointer Dereference
Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.10, from 6.1.0 before 6.1.2.27, from 6.0.0 before 6.
- 9.1 Critical severity
Connext Professional: Untrusted Pointer Dereference
Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.2.0 before 7.3.0.9.
- 7.0 High severity
Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
- 8.4 High severity
AMD Ryzen™ 4000 Series Mobile Processors with…: Untrusted Pointer Dereference
Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or denial of service.
- 8.4 High severity
Intel(R) Graphics Drivers: Untrusted Pointer Dereference
Untrusted pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.8 High severity
Snapdragon: Improper Restriction of Operations within the Bounds of a Memory Buffer
Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.
- 8.4 High severity
Intel(R) Graphics Drivers: Untrusted Pointer Dereference
Untrusted pointer dereference in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access.
- 8.2 High severity
UEFI firmware for some Intel(R) reference…: Untrusted Pointer Dereference
Untrusted pointer dereference in UEFI firmware for some Intel(R) reference processors may allow a privileged user to potentially enable escalation of privilege via local access.
- 8.4 High severity
Secure Access: Untrusted Pointer Dereference
There is an elevation of privilege vulnerability in server and client components of Absolute Secure Access prior to version 13.07. Attackers with local access and valid desktop user credentials can elevate their privilege to system level by passing invalid add
- 7.8 High severity
GPU display driver, vGPU software, and Cloud…: Untrusted Pointer Dereference
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and
- 7.8 High severity
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Exploited
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- 7.4 High severity
insydeh2o: Untrusted Pointer Dereference
A memory corruption vulnerability in SdHost and SdMmcDevice in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to escalating privileges i
- 7.4 High severity
insydeh2o: Untrusted Pointer Dereference
A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB19130163 in 05.29.07, kernel 5.3: IB19130163 in 05.38.07, kernel 5.4: IB19130163 in 05.46.07, kernel 5.5: IB19130163 in 05.54.07, and kernel 5.6: IB19130163
- 7.8 High severity
PDF-XChange Editor: Untrusted Pointer Dereference
PDF-XChange Editor JavaScript String Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploi
- 7.8 High severity
PDF-XChange Editor: Untrusted Pointer Dereference
PDF-XChange Editor App Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnera
- 7.8 High severity
PDF-XChange Editor: Untrusted Pointer Dereference
PDF-XChange Editor OXPS File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploi
- 7.8 High severity
Cobalt: Untrusted Pointer Dereference
Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to expl
- 7.8 High severity
Cobalt: Untrusted Pointer Dereference
Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnera
- 7.8 High severity
Cobalt: Untrusted Pointer Dereference
Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnera
- 7.8 High severity
Cobalt: Untrusted Pointer Dereference
Ashlar-Vellum Cobalt CO File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to expl
- 7.8 High severity
Cobalt: Untrusted Pointer Dereference
Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to expl
- 7.8 High severity
PDF-XChange Editor: Untrusted Pointer Dereference
PDF-XChange Editor EMF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit
- 7.8 High severity
AutoCAD: Untrusted Pointer Dereference
A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
- 7.8 High severity
Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Exploited
Windows Kernel Elevation of Privilege Vulnerability
- 7.8 High severity
MegaRAC_SPx: Improper Restriction of Operations within the Bounds of a Memory Buffer
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
- 7.8 High severity
MegaRAC_SPx: Improper Restriction of Operations within the Bounds of a Memory Buffer
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
- 7.8 High severity
AutoCAD, Advance Steel and Civil 3D: Improper Restriction of Operations within the Bounds of a Memory Buffer
A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
- 7.8 High severity
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Exploited
Windows DWM Core Library Elevation of Privilege Vulnerability
- 8.2 High severity
Mobile Radio: Release of Invalid Pointer or Reference
The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules. Two modules are used, one responsible for KVL key management and the other for TETRA cryptographic functionality. In both modules,
- 9.8 Critical severity
WebAccess/SCADA: Improper Restriction of Operations within the Bounds of a Memory Buffer
All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memory pointers for the server to use as-is. This could allow an attacker to gain access to the remote fil
- 7.6 High severity
GPU Display Driver for Windows and Linux: Untrusted Pointer Dereference
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.
- 8.4 High severity
Microsoft Streaming Service Untrusted Pointer Dereference Exploited
Microsoft Streaming Service Elevation of Privilege Vulnerability
- 7.8 High severity
NVIDIA GPU Display Driver: Untrusted Pointer Dereference
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler which may lead to denial of service, escalation of privileges, information disclosure, and data tampering.
- 7.8 High severity
vGPU software (guest driver - Linux), NVIDIA…: Untrusted Pointer Dereference
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
- 7.8 High severity
PDF-XChange Editor: Improper Restriction of Operations within the Bounds of a Memory Buffer
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specif
- 7.8 High severity
PDF-XChange Editor: Improper Restriction of Operations within the Bounds of a Memory Buffer
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specif
- 7.8 High severity
CIMPLICITY: Untrusted Pointer Dereference
GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code.
- 7.8 High severity
ScadaPro Server: Untrusted Pointer Dereference
Measuresoft ScadaPro Server (All Versions) uses unmaintained ActiveX controls. The controls may allow seven untrusted pointer deference instances while processing a specific project file.
- 8.8 High severity
Desktop: Untrusted Pointer Dereference
This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1 (51537). An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit t