CVE Vulnerabilities

CVE-2023-48727

Use of NullPointerException Catch to Detect NULL Pointer Dereference

Published: May 16, 2024 | Modified: May 17, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

NULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable information disclosure via local access.

Weakness

Catching NullPointerException should not be used as an alternative to programmatic checks to prevent dereferencing a null pointer.

Extended Description

Programmers typically catch NullPointerException under three circumstances:

Of these three circumstances, only the last is acceptable.

Potential Mitigations

References