Cyber Resilience

CWE · MITRE source

CWE-822Untrusted Pointer Dereference

Abstraction: Base · CVEs in our corpus: 226

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

An attacker can supply a pointer for memory locations that the product is not expecting. If the pointer is dereferenced for a write operation, the attack might allow modification of critical state variables, cause a crash, or execute code. If the dereferencing operation is for a read, then the attack might allow reading of sensitive data, cause a crash, or set a variable to an unexpected value (since the value will be read from an unexpected memory location). There are several variants of this weakness, including but not necessarily limited to:

Last updated: 21 August 2026 00:24 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 1 mapping(s) from 1 framework(s): CAPEC 1 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • SI-16 Memory Protection
  • SA-11 Developer Testing and Evaluation
  • PR.PS-06
  • ID.RA-01
Detect
Catch it (CSF Detect / Respond)
  • DE.CM-09
Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2023-29360 KEV 8.98.40.22132023-06-14
CVE-2023-36033 KEV 8.57.80.11982023-11-14
CVE-2024-21338 KEV 8.57.80.59812024-02-13
CVE-2024-35250 KEV 8.57.80.25222024-06-11
CVE-2025-24990 KEV 8.57.80.06002025-10-14
CVE-2023-21768 8.37.80.65422023-01-10
CVE-2025-50165 8.29.80.09522025-08-12
CVE-2018-17893 8.09.80.06382018-10-17
CVE-2018-7497 7.89.80.02882018-05-15
CVE-2018-14811 7.89.80.03582018-09-26
CVE-2023-1437 7.89.80.02802023-08-02
CVE-2018-12548 7.59.80.01132019-01-31
CVE-2020-26991 7.18.80.03992021-01-12
CVE-2020-27259 7.08.80.02672021-02-09
CVE-2024-38104 6.98.80.01822024-07-09
CVE-2024-37339 6.98.80.01622024-09-10
CVE-2024-37340 6.98.80.01622024-09-10
CVE-2024-436246.98.80.01832024-11-12
CVE-2026-481376.99.10.00562026-06-19
CVE-2025-1255 6.89.10.00342025-09-23
CVE-2025-4993 6.89.10.00342025-09-23
CVE-2025-62549 6.88.80.01292025-12-09
CVE-2026-33120 6.78.80.00712026-04-14
CVE-2019-13334 6.67.80.06842020-02-08
CVE-2024-36461 6.69.10.00762024-08-12