CVE-2024-23076: Null Pointer Dereference

Published Apr 10, 2024

Updated

JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /labels/BubbleXYItemLabelGenerator.java. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.

Affected Software

2 affected components

JFree JFreeChart

JFree JFreeChart=1.5.4

Event History

Apr 10, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-23076?

The severity of CVE-2024-23076 is disputed, with some parties arguing that there is insufficient evidence to classify it as a vulnerability.

How do I fix CVE-2024-23076?

Currently, there is no known fix for CVE-2024-23076 due to the disputed nature of the vulnerability.

Which version of JFreeChart is affected by CVE-2024-23076?

CVE-2024-23076 specifically affects JFreeChart version 1.5.4.

What component is associated with CVE-2024-23076?

CVE-2024-23076 is associated with the component /labels/BubbleXYItemLabelGenerator.java in JFreeChart.

Is there any consensus on the existence of CVE-2024-23076?

There is no consensus on the existence of CVE-2024-23076, as multiple third parties deny the evidence of a vulnerability.