CWE-690

• CWE ID
• 690

• CWE Name
• Unchecked Return Value to NULL Pointer Dereference

• CWE Abstraction
• Compound

• CWE structure
• Chain

• CWE Status
• Draft

The product does not check for an error after calling a function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference.

While unchecked return value weaknesses are not limited to returns of NULL pointers (see the examples in CWE-252), functions often return NULL to indicate an error status. When this error condition is not checked, a NULL pointer dereference can occur.