CVE Vulnerabilities

CVE-2022-2832

Use of NullPointerException Catch to Detect NULL Pointer Dereference

Published: Aug 16, 2022 | Modified: Feb 12, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.

Weakness

Catching NullPointerException should not be used as an alternative to programmatic checks to prevent dereferencing a null pointer.

Affected Software

Name Vendor Start Version End Version
Blender Blender 3.3.0-alpha (including) 3.3.0-alpha (including)

Extended Description

Programmers typically catch NullPointerException under three circumstances:

Of these three circumstances, only the last is acceptable.

Potential Mitigations

References