Use of NullPointerException Catch to Detect NULL Pointer Dereference
CWE-395
Catching NullPointerException should not be used as an alternative to programmatic checks to prevent dereferencing a null pointer.
We track 5 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.5.
How this weakness is prevented
- Architecture and Design Implementation: Do not extensively rely on catching exceptions (especially for validating user input) to handle errors. Handling exceptions can decrease the performance of an application.
Latest Use of NullPointerException Catch to Detect NULL Pointer Dereference vulnerabilities
- 7.5 High severity
Ollama: Use of NullPointerException Catch to Detect NULL Pointer Dereference
Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal model image processing functionality. When processing base64-encoded image data via the /api/chat endpoint, the application fails to validate t
- 9.8 Critical severity
Xen: Use of NullPointerException Catch to Detect NULL Pointer Dereference
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer deref
- 9.8 Critical severity
Xen: Use of NullPointerException Catch to Detect NULL Pointer Dereference
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer deref
- 7.8 High severity
Intel(R) VROC software: NULL Pointer Dereference
Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.5 High severity
Blender: NULL Pointer Dereference
A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.