PT-2024-19656 · Unknown · Jgrapht Core

Published

2024-04-08

·

Updated

2024-08-01

·

CVE-2024-23078

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions JGraphT Core version 1.5.2
Description A NullPointerException was discovered in JGraphT Core via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double). However, the existence of this issue is disputed by multiple third parties due to potentially insufficient evidence. The compare function is used for comparing Double values, but the specifics of how it leads to a NullPointerException are not detailed. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.
Recommendations For JGraphT Core version 1.5.2, consider temporarily disabling or restricting the use of the org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double) component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2024-23078

Affected Products

Jgrapht Core