948
return retString;
}
Observed Examples
Reference Description
CVE-2022-21820 A GPU data center manager detects an error due to a malformed request but
does not act on it, leading to memory corruption.
https://www.cve.org/CVERecord?id=CVE-2022-21820
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 728 OWASP Top Ten 2004 Category A7 - Improper Error
Handling
711 2337
MemberOf 851 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 8 - Exceptional Behavior (ERR)
844 2365
MemberOf 880 CERT C++ Secure Coding Section 12 - Exceptions and
Error Handling (ERR)
868 2379
MemberOf 884 CWE Cross-section 884 2567
MemberOf 962 SFP Secondary Cluster: Unchecked Status Condition 888 2400
MemberOf 1306 CISQ Quality Measures - Reliability 1305 2483
MemberOf 1405 Comprehensive Categorization: Improper Check or
Handling of Exceptional Conditions
1400 2531
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CLASP Improper error handling
The CERT Oracle Secure
Coding Standard for Java
(2011)
ERR00-J Do not suppress or ignore checked
exceptions
Software Fault Patterns SFP4 Unchecked Status Condition
References
[REF-18]Secure Software, Inc.. "The CLASP Application Security Process". 2005. < https://
cwe.mitre.org/documents/sources/TheCLASPApplicationSecurityProcess.pdf >.
[REF-44]Michael Howard, David LeBlanc and John Viega. "24 Deadly Sins of Software Security".
McGraw-Hill. 2010.
CWE-391: Unchecked Error Condition
Weakness ID : 391
Structure : Simple
Abstraction : Base
Description
[PLANNED FOR DEPRECATION. SEE MAINTENANCE NOTES AND CONSIDER CWE-252,
CWE-248, OR CWE-1069.] Ignoring exceptions and other error conditions may allow an attacker to
induce unexpected behavior unnoticed.
Relationships
CWE Version 4.14
CWE-391: Unchecked Error Condition
CWE-391: Unchecked Error Condition