cve.bz

CWE-395: Use of NullPointerException Catch to Detect NULL Pointer Dereference

Filter

Catching NullPointerException should not be used as an alternative to programmatic checks to prevent dereferencing a null pointer.

What the weakness is: CWE-395 at MITRE. All weaknesses

Ask an AI about CWE-395

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-395: Use of NullPointerException Catch to Detect NULL Pointer Dereference and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/395.html and https://cve.bz/cve/cwe/395?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.7CVE-2025-15514EPSS 0.8%

    Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal model image processing functionality. When processing base64-encoded image data via the /api/chat endpoint, the applicatio…

  2. 9.8CVE-2025-58142EPSS 0.5%

    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: …

  3. 9.8CVE-2025-27466EPSS 0.5%

    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: …

  4. 5.8CVE-2024-36275EPSS 0.2%

    NULL pointer dereference in some Intel(R) Optane(TM) PMem Management software versions before CR_MGMT_02.00.00.4040, CR_MGMT_03.00.00.0499 may allow a authenticated user to potentially enable denial of service via local access.

  5. 1.0CVE-2024-28030EPSS 0.2%

    NULL pointer dereference in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable denial of service via local access.

  6. 6.9CVE-2023-23904EPSS 0.1%

    NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

  7. 3.3CVE-2023-48727EPSS 0.2%

    NULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable information disclosure via local access.

  8. 4.4CVE-2023-41082EPSS 0.2%

    Null pointer dereference for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable denial of service via local access.

  9. 6.5CVE-2024-27662EPSS 0.4%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  10. 6.5CVE-2024-27661EPSS 0.4%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  11. 6.5CVE-2024-27659EPSS 0.6%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_42AF30(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  12. 6.5CVE-2024-27658EPSS 0.6%

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

  13. 5.5CVE-2023-25071EPSS 0.2%

    NULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authenticated user to potentially enable denial of service via local access.

  14. 5.5CVE-2022-42879EPSS 0.2%

    NULL pointer dereference in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable denial of service via local access.

  15. 5.5CVE-2022-42878EPSS 0.2%

    Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable information disclosure via local access.

  16. 7.8CVE-2022-29508EPSS 0.2%

    Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access.

  17. 7.5CVE-2022-2832EPSS 1.8%

    A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.