Skip to content

Instantly share code, notes, and snippets.

@LLM4IG
Created April 8, 2024 15:56
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save LLM4IG/3cc9183dcd887020368a0bafeafec5e3 to your computer and use it in GitHub Desktop.
Save LLM4IG/3cc9183dcd887020368a0bafeafec5e3 to your computer and use it in GitHub Desktop.
[CVE-2024-23081]
[CVE ID]
CVE-2024-23081
[PRODUCT]
ThreeTen Backport
[VERSION]
v1.6.8
[PROBLEM TYPE]
Buffer Overflow - NullPointerException
[DESCRIPTION]
Take org.threeten.bp.LocalDate::compareTo(ChronoLocalDate) as an example, if the parameter other is null, a NullPointerException is thrown.
@jamesrgrinter
Copy link

this is garbage. A run-time NullPointerException does not automatically make a valid CVE.

@consp1racy
Copy link

as if there weren't enough false positives 🤬

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment