Untrusted Pointer Dereference
CWE-822
The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
We track 81 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.1. 5 have been exploited in real attacks.
Latest Untrusted Pointer Dereference vulnerabilities
- 7.1 High severity
CODESYS Control RTE (SL): Improper Restriction of Operations within the Bounds of a Memory Buffer
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor contr