CVE Vulnerabilities

CVE-2022-2832

Use of NullPointerException Catch to Detect NULL Pointer Dereference

Published: Aug 16, 2022 | Modified: Feb 12, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
5.1 MODERATE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Ubuntu
MEDIUM

A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.

Weakness

Catching NullPointerException should not be used as an alternative to programmatic checks to prevent dereferencing a null pointer.

Affected Software

Name Vendor Start Version End Version
Blender Blender 3.3.0-alpha (including) 3.3.0-alpha (including)
OSE-OSC-1.3-RHEL-8 RedHat openshift-sandboxed-containers/osc-monitor-rhel8:1.3.1-5 *
OSE-OSC-1.3-RHEL-8 RedHat openshift-sandboxed-containers/osc-must-gather-rhel8:1.3.1-6 *
OSE-OSC-1.3-RHEL-8 RedHat openshift-sandboxed-containers/osc-operator-bundle:1.3.1-10 *
OSE-OSC-1.3-RHEL-8 RedHat openshift-sandboxed-containers/osc-rhel8-operator:1.3.1-5 *
Blender Ubuntu bionic *
Blender Ubuntu kinetic *
Blender Ubuntu lunar *
Blender Ubuntu mantic *
Blender Ubuntu trusty *
Blender Ubuntu xenial *

Extended Description

Programmers typically catch NullPointerException under three circumstances:

Of these three circumstances, only the last is acceptable.

Potential Mitigations

References