Weakness (CWE)
CWE-395: Use of NullPointerException Catch to Detect NULL Pointer Dereference
Catching NullPointerException should not be used as an alternative to programmatic checks to prevent dereferencing a null pointer.
How to prevent it (1 mitigation)
-
Architecture and Design, Implementation
Do not extensively rely on catching exceptions (especially for validating user input) to handle errors. Handling exceptions can decrease the performance of an application.
Source: MITRE CWE-395
18 results · Feed
-
High 8.7
Ollama Multi-Modal Model Image Processing NULL Pointer Dereference
Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal model image processing functionality. When processing base64-encoded image data via the /api/chat endpoint, the application fails to validate …
-
Critical 9.8
Mutiple vulnerabilities in the Viridian interface
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dere…
-
Critical 9.8
Mutiple vulnerabilities in the Viridian interface
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dere…
-
Medium 6.1
NULL pointer dereference in some Intel(R) Optane(TM) PMem Management software versions before CR_MGMT_02.00.00.4040, CR…
-
Low 2.2
NULL pointer dereference in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potenti…
-
Medium 6.1
NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially e…
-
Low 3.3
NULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to pote…
-
Medium 4.4
Null pointer dereference for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to pot…
-
Medium 6.5
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4(). This vulnerability a…
-
Medium 6.5
D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability all…
-
Medium 6.5
D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_42AF30(). This vulnerability all…
-
Medium 6.5
D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability all…
-
Medium 5.6
NULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers before version 31.0.10…
-
Medium 6.1
NULL pointer dereference in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticate…
-
Medium 6.3
Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to pot…
-
Low 2.8
Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec …
-
Unscored —
A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that ma…
-
Medium —
Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo
bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."