CVE-2024-23085

ALTO 7.5CVE-2024-23085 · Published 08/04/2024 · updated 09/07/2026

In breve

CVE-2024-23085 è una vulnerabilità ALTO (CVSS 7.5) che riguarda apfloat (mikkotommila).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.53%, superiore al 45.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
apfloat mikkotommila	`= 1.10.1`	No fix yet

Description

Apfloat v1.10.1 was discovered to contain a NullPointerException via the component org.apfloat.internal.DoubleScramble::scramble(double[], int, int[]). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.

References

gist.github.com/LLM4IG/a4a54fc4abe044976a66af9fffedfc94 · Third Party Advisory
mtommila/apfloat · Product

Altre vulnerabilità di apfloat

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free