CWE-822Untrusted Pointer Dereference

Description

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

[object Object]

Common consequences

• Confidentiality→Read Memory
  If the untrusted pointer is used in a read operation, an attacker might be able to read sensitive portions of memory.
• Availability→DoS: Crash, Exit, or Restart
  If the untrusted pointer references a memory location that is not accessible to the product, or points to a location that is "malformed" or larger than expected by a read or write operation, the application may terminate unexpectedly.
• Integrity,Confidentiality,Availability→Execute Unauthorized Code or Commands,Modify Memory
  If the untrusted pointer is used in a function call, or points to unexpected data in a write operation, then code execution may be possible.

Related CWEs

Recent CVEs classified under this CWE