CVE-2024-23085
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
A NullPointerException was discovered in Apfloat v1.10.1 in the scramble method of the DoubleScramble class. Multiple third parties dispute the validity of this report, suggesting it may result from using an insufficiently robust vulnerability identification tool.
Risk Assessment
The risk to the organization is low as the vulnerability is disputed and may not be a real threat. If confirmed, the exception could lead to application crashes.
Recommendation
It is recommended to monitor further information from the Apfloat library maintainers and consider updating to a newer version if a patch is released.
Other vulnerabilities in Apfloat
See all- CVE-2024-23086Critical
A potential stack overflow was discovered in Apfloat v1.10.1 in the modPow method of the DoubleModMath class. However, multiple third parties dispute the validity of this report, citing insufficient evidence for the vulnerability's existence.
- CVE-2024-23084High
Apfloat v1.10.1 was found to contain an ArrayIndexOutOfBoundsException in the add method of the DoubleCRTMath class. Note: multiple third parties dispute the existence of this vulnerability, suggesting the report may be based on an insufficiently robust tool.
Original NVD description (English source)
Apfloat v1.10.1 was discovered to contain a NullPointerException via the component org.apfloat.internal.DoubleScramble::scramble(double[], int, int[]). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.