Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.1
CVE-2024-22949: JFreeChart v1.5.4 Chart Annotation Error
CVE-2024-22949 · published 2 years ago
Summary
A potential error exists in JFreeChart's chart annotations, which could lead to a system crash or unexpected behavior. However, some experts question the validity of this finding, suggesting that the evidence may not be strong enough. It's best to wait for further confirmation before taking action.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| jfree | jfreechart |
1.5.4 cpe:2.3:a:jfree:jfreechart:1.5.4:*:*:*:*:*:*:* |
Original advisory text
JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /chart/annotations/CategoryLineAnnotation. NOTE: this is disputed by multiple third parties who believe there wa...
JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /chart/annotations/CategoryLineAnnotation. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.
References
- http://jfreechart.com Broken Link
- https://gist.github.com/LLM4IG/35c46e009b205ef6acd0e290e80fb876 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/22xxx/CVE-2024-22949... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-22949 Vendor Advisory
- https://github.com/jfree/jfreechart Product
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-125Out-of-bounds Read
Timeline
Published8 Apr 2024
Updated4 Nov 2026
First seen5 Jul 2026
Track software like this
Free during beta