cve.bz

CWE-252: Unchecked Return Value, page 5

Filter

The product does not check the return value from a method or function.

What the weakness is: CWE-252 at MITRE

Ask an AI about CWE-252

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-252: Unchecked Return Value and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/252.html and https://cve.bz/cve/cwe/252?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2009-0265EPSS 2.5%

    Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TL…

  2. –CVE-2007-5191EPSS 0.4%

    mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.

  3. 9.8CVE-2007-3798ExploitEPSS 70%

    Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

  4. –CVE-2005-4360ExploitEPSS 87%

    The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "~0" through "~9", which cau…

  5. 7.5CVE-2002-1372EPSS 3.0%

    Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing fil…