CVE-2024-23086
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
A potential stack overflow was discovered in Apfloat v1.10.1 in the modPow method of the DoubleModMath class. However, multiple third parties dispute the validity of this report, citing insufficient evidence for the vulnerability's existence.
Risk Assessment
If genuine, this vulnerability could cause application crashes or potential code execution, but due to the disputed nature of the report, the risk is uncertain.
Recommendation
Monitor official Apfloat updates and verify the report through trusted sources before taking corrective action.
Other vulnerabilities in Apfloat
See all- CVE-2024-23084High
Apfloat v1.10.1 was found to contain an ArrayIndexOutOfBoundsException in the add method of the DoubleCRTMath class. Note: multiple third parties dispute the existence of this vulnerability, suggesting the report may be based on an insufficiently robust tool.
- CVE-2024-23085High
A NullPointerException was discovered in Apfloat v1.10.1 in the scramble method of the DoubleScramble class. Multiple third parties dispute the validity of this report, suggesting it may result from using an insufficiently robust vulnerability identification tool.
Original NVD description (English source)
Apfloat v1.10.1 was discovered to contain a stack overflow via the component org.apfloat.internal.DoubleModMath::modPow(double. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.