Lucene search

Veracode Vulnerability DatabaseVERACODE:46305

HistoryApr 10, 2024 - 6:58 a.m.

Out Of Bounds Exception

2024-04-1006:58:39

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

jgrapht core

out of bounds exception

input validation

arrayindexoutofboundsexception

denial of service

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

JGraphT Core is vulnerable to an Out of Bounds Exception The vulnerability is due to missing input validation in the org.jgrapht.util.ArrayUtil::reverse(int[], int, int) method. If the value of the parameter to is greater than the length of the array arr, an ArrayIndexOutOfBoundsException is raised which can result in Denial of Service.

CPENameOperatorVersion
jgrapht - corele1.5.2
jgrapht - corele1.5.2

CPE	Name	Operator	Version
	jgrapht - core	le	1.5.2
	jgrapht - core	le	1.5.2

References

jgrapht.com

gist.github.com/LLM4IG/c19779800945cd0a400d2150fb83d079

github.com/jgrapht/jgrapht

github.com/jgrapht/jgrapht/blob/master/jgrapht-core/src/main/java/org/jgrapht/util/ArrayUtil.java#L40