Cyber Resilience

CWE · MITRE source

CWE-690Unchecked Return Value to NULL Pointer Dereference

Abstraction: Compound · CVEs in our corpus: 33

The product does not check for an error after calling a function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference.

While unchecked return value weaknesses are not limited to returns of NULL pointers (see the examples in CWE-252), functions often return NULL to indicate an error status. When this error condition is not checked, a NULL pointer dereference can occur.

Last updated: 20 August 2026 14:15 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.PS-06
  • SA-11 Developer Testing and Evaluation
  • SA-15 Development Process, Standards, and Tools
  • SI-11 Error Handling
Detect
Catch it (CSF Detect / Respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2022-20682 6.58.60.01322022-04-15
CVE-2020-6095 6.37.50.02942020-03-27
CVE-2020-13582 6.37.50.02612021-01-26
CVE-2020-1648 6.17.50.01282020-07-17
CVE-2022-39381 6.07.50.00742022-11-02
CVE-2022-41957 6.07.50.01042022-11-28
CVE-2022-22231 5.97.50.00662022-10-18
CVE-2024-23085 5.97.50.00532024-04-08
CVE-2026-244045.47.10.00402026-01-24
CVE-2026-244095.47.10.00312026-01-24
CVE-2026-244105.47.10.00312026-01-24
CVE-2026-244115.47.10.00312026-01-24
CVE-2026-216895.06.50.00282026-01-07
CVE-2024-239154.55.30.00552024-09-18
CVE-2024-239164.55.30.00552024-09-18
CVE-2024-311644.55.30.00552024-09-18
CVE-2024-311654.55.30.00552024-09-18
CVE-2024-311674.55.30.00552024-09-18
CVE-2024-311754.55.30.00552024-09-18
CVE-2024-311824.55.30.00442024-09-18
CVE-2024-311854.55.30.00442024-09-18
CVE-2024-311964.45.30.00422024-09-18
CVE-2026-24160 4.45.50.00472026-05-20
CVE-2022-22233 4.25.50.00182022-10-18
CVE-2026-214964.25.50.00162026-01-07