Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

CVEs (212)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-14392 5Canonical DebianFedoraproject+2 more 5Database Interface Debian LinuxFedora+2 more Jun 17, 2026 Sep 16, 2020 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 An untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able to manipulate calls to dbd_db_login6_sv() could cause memory corruption, affecting the service's availability.
CVE-2020-17392 1Parallels 1Parallels Desktop Jun 17, 2026 Aug 25, 2020 N/A· v4 8.8 HIGH· v3 4.6 MEDIUM· v2 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code on the target system...Show more This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handler for HOST_IOCTL_SET_KERNEL_SYMBOLS in the prl_hypervisor kext. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the kernel. Was ZDI-CAN-10519.Show less
CVE-2019-13334 1Foxitsoftware 1Phantompdf Jun 17, 2026 Feb 8, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a m...Show more This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of DXF files to PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8774.Show less
CVE-2018-19029 1Lcds 1Laquis Scada Nov 21, 2024 Feb 5, 2019 N/A· v4 7.8 HIGH· v3 8.3 HIGH· v2 LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote code execution, data exfiltration, or ca...Show more LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote code execution, data exfiltration, or cause a system crash.Show less
CVE-2018-12548 1Eclipse 1Openj9 Nov 21, 2024 Jan 31, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer values that are dereferenced in the native code.
CVE-2018-17893 1Lcds 1Laquis Scada Nov 21, 2024 Oct 17, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote code execution.
CVE-2018-14811 1Fujielectric 1V Server Firmware Nov 21, 2024 Sep 26, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Fuji Electric V-Server 4.0.3.0 and prior, Multiple untrusted pointer dereference vulnerabilities have been identified, which may allow remote code execution.
CVE-2018-7497 1Advantech 4Webaccess Webaccess/nmsWebaccess Dashboard+1 more Jun 17, 2026 May 15, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and pri...Show more In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, several untrusted pointer dereference vulnerabilities have been identified, which may allow an attacker to execute arbitrary code.Show less
CVE-2018-7502 1Beckhoff 2Twincat Twincat C++ Jun 17, 2026 Mar 23, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to expl...Show more Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges.Show less
CVE-2018-7525 1Omron 1Cx Supervisor Jun 17, 2026 Mar 21, 2018 N/A· v4 5.3 MEDIUM· v3 4.6 MEDIUM· v2 In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability.
CVE-2017-16728 1Advantech 1Webaccess Nov 21, 2024 Jan 5, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the program to use an invalid memory address, res...Show more An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the program to use an invalid memory address, resulting in a program crash.Show less
CVE-2017-12719 1Advantech 1Webaccess May 13, 2026 Nov 6, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dereference a pointer within the program causing the application...Show more An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dereference a pointer within the program causing the application to become unavailable.Show less

Previous 1...7 8 9 1011