Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.2
CVE-2024-23079: JGraphT Core v1.5.2 can cause a program crash
CVE-2024-23079 · published 2 years ago
Summary
A bug in JGraphT Core v1.5.2 can cause a program to crash when it tries to compare two numbers. This might happen if your business relies on JGraphT Core, but it's disputed whether this bug actually exists. If you're using JGraphT Core, you might want to wait for further confirmation before taking action.
Original advisory text
JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double). NOTE: this is disputed by multiple th...
JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-120Classic Buffer Overflow
Timeline
Published8 Apr 2024
Updated29 Oct 2026
First seen5 Jul 2026
Track software like this
Free during beta