CWE-822
Untrusted Pointer Dereference
The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
Impactr finds and proves whether CWE-822 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.