NULL Pointer Dereference

2024-04-1008:43:06

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

apfloat vulnerability dos input validation

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

org.apfloat: apfloat is vulnerable to NULL Pointer Dereference. The vulnerability is caused due to a lack of input validation in the org.apfloat.internal.DoubleCRTMath::add method. An attacker can exploit this vulnerability by passing a null value as an argument, resulting in a Denial of Service(DoS).

CPENameOperatorVersion
apfloatle1.13.0
apfloatle1.13.0

CPE	Name	Operator	Version
	apfloat	le	1.13.0
	apfloat	le	1.13.0

References

apfloat.com

gist.github.com/LLM4IG/a4a54fc4abe044976a66af9fffedfc94

github.com/mtommila/apfloat