Skip to content

Instantly share code, notes, and snippets.

[CVE ID]
CVE-2024-23086
[PRODUCT]
Apfloat
[VERSION]
v1.10.1
[PROBLEM TYPE]
Buffer Overflow - StackOverflowError
[DESCRIPTION]
Taking org.apfloat.internal.DoubleModMath::modPow(double, double) as an example, if a is equal to 2.5 and n is equal to -3.0, then the program will fall into infinite recursion and cause StackOverflowError.
[CVE ID]
CVE-2024-23085
[PRODUCT]
Apfloat
[VERSION]
v1.10.1
[PROBLEM TYPE]
Buffer Overflow - NullPointerException
[DESCRIPTION]
Taking org.apfloat.internal.DoubleCRTMath::add(double[], double[]) as an example, if we pass null to either of the two arguments, a NullPointerException is thrown.
[CVE ID]
CVE-2024-23084
[PRODUCT]
Apfloat
[VERSION]
v1.10.1
[PROBLEM TYPE]
Integer Overflow - ArrayIndexOutOfBoundsException
[DESCRIPTION]
Taking org.apfloat.internal.DoubleCRTMath::add(double[], double[]) as an example, if we set either of the two arguments to an array of length less than 3, an ArrayIndexOutOfBoundsException is thrown.
[CVE ID]
CVE-2024-23083
[PRODUCT]
Time4J Base
[VERSION]
v5.9.3
[PROBLEM TYPE]
Buffer Overflow - NullPointerException
[DESCRIPTION]
Taking net.time4j.format.internal.FormatUtils::useDefaultWeekmodel(Locale) as an example, if the parameter locale is null, a NullPointerException is thrown on line 91.
[CVE ID]
CVE-2024-23082
[PRODUCT]
ThreeTen Backport
[VERSION]
v1.6.8
[PROBLEM TYPE]
Integer Overflow - StringIndexOutOfBoundsException
[DESCRIPTION]
In method "org.threeten.bp.format.DateTimeFormatter::parse(CharSequence, ParsePosition)", if the parameter text is an empty string, the index of the parameter position is 10 and the errorIndex is 10, then a StringIndexOutOfBoundsException is thrown.
[CVE ID]
CVE-2024-23081
[PRODUCT]
ThreeTen Backport
[VERSION]
v1.6.8
[PROBLEM TYPE]
Buffer Overflow - NullPointerException
[DESCRIPTION]
Take org.threeten.bp.LocalDate::compareTo(ChronoLocalDate) as an example, if the parameter other is null, a NullPointerException is thrown.
[CVE ID]
CVE-2024-23080
[PRODUCT]
Joda Time
[VERSION]
v2.12.5
[PROBLEM TYPE]
Buffer Overflow - NullPointerException
[DESCRIPTION]
Taking org.joda.time.format.PeriodFormat::wordBased(Locale) as an example, if the argument locale is null, a NullPointerException is thrown on line 204.
[CVE ID]
CVE-2024-23079
[PRODUCT]
JGraphT Core
[VERSION]
v1.5.2
[PROBLEM TYPE]
Buffer Overflow - NullPointerException
[DESCRIPTION]
In method "org.jgrapht.util.ArrayUtil::reverse(int[], int, int)", an ArrayIndexOutOfBoundsException is thrown if the value of the parameter to is greater than the length of the array arr.
[CVE ID]
CVE-2024-23078
[PRODUCT]
JGraphT Core
[VERSION]
v1.5.2
[PROBLEM TYPE]
Buffer Overflow - NullPointerException
[DESCRIPTION]
Taking org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double) as an example, if either of the input parameters is null, a NullPointerException is caused
[CVE ID]
CVE-2024-23076
[PRODUCT]
JFreeChart
[VERSION]
v1.5.4
[PROBLEM TYPE]
Buffer Overflow - NullPointerException
[DESCRIPTION]
In method generateLabelString(XYDataset dataset, int series, int item) in file org/jfree/chart/labels/BubbleXYItemLabelGenerator.java, lines 171 and 174, call the createItemArray method and pass in the parameter dataset, if the dataset parameter is null, it will cause line 194 of the createItemArray(XYZDataset dataset, int series, int item) method to produce a NullPointerException.