Skip to content
OpenAdvisories

Weakness (CWE)

CWE-252: Unchecked Return Value

Base Draft

The product does not check the return value from a method or function.

How to prevent it (4 mitigations)

  1. Implementation

    Check the results of all functions that return a value and verify that the value is expected.

  2. Implementation

    For any pointers that could have been modified or provided from a function that can return NULL, check the pointer for NULL before use. When working with a multithreaded or otherwise asynchronous environment, ensure that proper locking APIs are used to lock before the check, and unlock when it has finished [REF-1484].

  3. Implementation

    Ensure that you account for all possible return values from the function.

  4. Implementation

    When designing a function, make sure you return a value or throw an exception in case of an error.

Source: MITRE CWE-252

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-111497 Exploited Public exploit EPSS 83%

    Out-of-Bounds Write in Google Brotli Decoder

    A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

    Google Brotli nodejs dotnet7 Debian Ubuntu Alpine PyPI Go Hex
    KEV Oct 27, 2026
  • Critical 9.8
    CVE-2007-3798 Public exploit EPSS 70%

    Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute ar…

    tcpdump Debian