1138
Nature Type ID Name Page
MemberOf 1200 Weaknesses in the 2019 CWE Top 25 Most Dangerous
Software Errors
1200 2587
MemberOf 1306 CISQ Quality Measures - Reliability 1305 2483
MemberOf 1337 Weaknesses in the 2021 CWE Top 25 Most Dangerous
Software Weaknesses
1337 2589
MemberOf 1350 Weaknesses in the 2020 CWE Top 25 Most Dangerous
Software Weaknesses
1350 2594
MemberOf 1387 Weaknesses in the 2022 CWE Top 25 Most Dangerous
Software Weaknesses
1387 2597
MemberOf 1412 Comprehensive Categorization: Poor Coding Practices 1400 2538
MemberOf 1425 Weaknesses in the 2023 CWE Top 25 Most Dangerous
Software Weaknesses
1425 2600
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
7 Pernicious Kingdoms Null Dereference
CLASP Null-pointer dereference
PLOVER Null Dereference (Null Pointer
Dereference)
OWASP Top Ten 2004 A9 CWE More Specific Denial of Service
CERT C Secure Coding EXP34-C Exact Do not dereference null pointers
Software Fault Patterns SFP7 Faulty Pointer Use
References
[REF-6]Katrina Tsipenyuk, Brian Chess and Gary McGraw. "Seven Pernicious Kingdoms: A
Taxonomy of Software Security Errors". NIST Workshop on Software Security Assurance Tools
Techniques and Metrics. 2005 November 7. NIST. < https://samate.nist.gov/SSATTM_Content/
papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security
%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdf >.
[REF-18]Secure Software, Inc.. "The CLASP Application Security Process". 2005. < https://
cwe.mitre.org/documents/sources/TheCLASPApplicationSecurityProcess.pdf >.
[REF-1031]"Null pointer / Null dereferencing". 2019 July 5. Wikipedia. < https://en.wikipedia.org/
wiki/Null_pointer#Null_dereferencing >.
[REF-1032]"Null Reference Creation and Null Pointer Dereference". Apple. < https://
developer.apple.com/documentation/xcode/null-reference-creation-and-null-pointer-dereference
>.2023-04-07.
[REF-1033]"NULL Pointer Dereference [CWE-476]". 2012 September 1. ImmuniWeb. < https://
www.immuniweb.com/vulnerability/null-pointer-dereference.html >.
CWE-477: Use of Obsolete Function
Weakness ID : 477
Structure : Simple
Abstraction : Base
Description
The code uses deprecated or obsolete functions, which suggests that the code has not been
actively reviewed or maintained.
Extended Description
As programming languages evolve, functions occasionally become obsolete due to:
CWE Version 4.14
CWE-477: Use of Obsolete Function
CWE-477: Use of Obsolete Function