CVE-2024-23084

Published Apr 8, 2024 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
Apfloat v1.10.1 was discovered to contain an ArrayIndexOutOfBoundsException via the component org.apfloat.internal.DoubleCRTMath::add(double[], double[]). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Apfloat
Apfloat apfloat
CPEs cpe:2.3:a:apfloat:apfloat:*:*:*:*:*:*:*:*
Vendors & Products Apfloat
Apfloat apfloat
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Mikkotommila
Mikkotommila apfloat
CPEs cpe:2.3:a:mikkotommila:apfloat:1.10.1:*:*:*:*:*:*:*
Vendors & Products Mikkotommila
Mikkotommila apfloat
Type Values Removed Values Added
Weaknesses CWE-129
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Jul 9, 2026, 12:30 AM
Reserved
Jan 11, 2024, 12:00 AM
Status
Modified
Published
Apr 8, 2024, 11:15 PM
Modified
Jul 9, 2026, 1:18 AM