CWE-395Base

Use of NullPointerException Catch to Detect NULL Pointer Dereference

Draft in the CWE catalog ยท 13 CVEs mapped

13
CVEs mapped
5.9
Median CVSS
What it is

Catching NullPointerException should not be used as an alternative to programmatic checks to prevent dereferencing a null pointer.

Recent examples
7.5cvss
CVE-2025-15514

CVE-2025-15514 - HIGH Severity Vulnerability

โšก A null pointer dereference is lurking in Ollama's image processing! When it tries to handle invalid image data, it can crash spectacularly โ€” think of it as an overzealous chef tossing out a dish without checking if the ingredients were even good! ๐Ÿฝ๏ธ Imagine a restaurant where the chef skips the quality check on ingredients. If a customer orders a dish with spoiled produce, the whole kitchen might crash with chaos! That's what happens here when Ollama processes a malformed image; it leads to a denial of service, making the whole service unavailable until it's rebooted. An attacker can exploit this by sending corrupt base64 image data to the /api/chat endpoint. This will lead to a segmentation fault, crashing the application and rendering it unavailable for all users. The downtime could severely impact service availability, causing frustration and potential loss of users.

HIGH
1%
epss
9.8cvss
CVE-2025-58142

CVE-2025-58142 - CRITICAL Severity Vulnerability

๐Ÿ”ฅ A sneaky NULL pointer dereference could lead to a serious issue while handling synthetic timer messages in Viridian! Think of it as a restaurant that assumes a table is set before serving a meal โ€” if the table isn't there, everything goes haywire! This vulnerability can cause failures in guest memory management, leading to instability. An attacker could exploit this vulnerability to cause unexpected behavior in the system, potentially crashing the guest environment or even worse, leading to data loss. With a CVSS score of 9.8, the stakes are high, and the consequences could be absolutely devastating!

CRITICAL
0%
epss
9.8cvss
CVE-2025-27466

CVE-2025-27466 - CRITICAL Severity Vulnerability

๐Ÿšจ A NULL pointer dereference could leave your virtual machine vulnerable! This CVE, CVE-2025-27466, is all about mishandling guest memory pages that can lead to unexpected crashes! ๐Ÿ”ฅ Think of it like a hotel booking system that crashes when you try to check in without an actual reservation โ€” if the system can't find your info, everything goes haywire. This CVE disrupts the ability of the hypervisor to manage guest memory correctly, leading to potential chaos in virtual environments. If exploited, an attacker could trigger a crash in your virtual machine, rendering important services unavailable. This is especially devastating for any businesses relying on uptime, as it could lead to data loss, interrupted services, and even compromise the entire virtualized environment.

CRITICAL
0%
epss
The record
Technical detail
CWE ID
CWE-395
Abstraction
Base
Structure
Simple
Status
Draft
References (2)