Weakness (CWE)
CWE-395: Use of NullPointerException Catch to Detect NULL Pointer Dereference
Variant Draft
Catching NullPointerException should not be used as an alternative to programmatic checks to prevent dereferencing a null pointer.
How to prevent it (1 mitigation)
-
Architecture and Design, Implementation
Do not extensively rely on catching exceptions (especially for validating user input) to handle errors. Handling exceptions can decrease the performance of an application.
Source: MITRE CWE-395
11 results · Clear filters · Feed
-
Medium 6.1
NULL pointer dereference in some Intel(R) Optane(TM) PMem Management software versions before CR_MGMT_02.00.00.4040, CR…
-
Medium 6.1
NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially e…
-
Medium 4.4
Null pointer dereference for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to pot…
-
Medium 6.5
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4(). This vulnerability a…
-
Medium 6.5
D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability all…
-
Medium 6.5
D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_42AF30(). This vulnerability all…
-
Medium 6.5
D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability all…
-
Medium 5.6
NULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers before version 31.0.10…
-
Medium 6.1
NULL pointer dereference in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticate…
-
Medium 6.3
Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to pot…
-
Medium —
Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo
bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."