Weakness (CWE)

CWE-822: Untrusted Pointer Dereference

Base Incomplete

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

Source: MITRE CWE-822

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Low 3.6

CVE-2026-96393

The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Aff…

canva affinity

Oct 9, 2026
Low 1.8

CVE-2021-26410

Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter val…

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ Embedded V2000 Series Processors

Feb 10, 2026
Low 2.1

CVE-2025-58749

WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode

WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mode, the runtime cannot exit normally when executing WebAssembly programs containing a memory.fill instruction …

bytecodealliance wasm-micro-runtime

Sep 16, 2025