CVE-2024-23086
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
A potential stack overflow was discovered in Apfloat v1.10.1 in the modPow method of the DoubleModMath class. However, multiple third parties dispute the validity of this report, citing insufficient evidence for the vulnerability's existence.
Risk Assessment
If genuine, this vulnerability could cause application crashes or potential code execution, but due to the disputed nature of the report, the risk is uncertain.
Recommendation
Monitor official Apfloat updates and verify the report through trusted sources before taking corrective action.
Original NVD description (English source)
Apfloat v1.10.1 was discovered to contain a stack overflow via the component org.apfloat.internal.DoubleModMath::modPow(double. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.