NVD disclosure day

Published threat advisories for April 8, 2024

CVE advisoryCRITICAL

CVE-2024-22949

JFreeChart CategoryLineAnnotation NullPointerException

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A reported NullPointerException in JFreeChart's CategoryLineAnnotation is disputed by third parties, making its existence uncertain. If reachable, it could potentially cause a denial-of-service by disrupting chart processing. Readers should care due to potential application availability impacts.

CVE advisoryCRITICAL

CVE-2024-23086

Apfloat Stack Overflow Vulnerability CVE-2024-23086

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A disputed stack overflow vulnerability has been identified in the Apfloat library within the `DoubleModMath::modPow` function, potentially allowing for application compromise or denial of service if reachable. However, multiple third parties question the evidence for this vulnerability.