CVE-2024-23077. - Githubissues

jfree / jfreechart

A 2D chart library for Java applications (JavaFX, Swing or server-side).

http://www.jfree.org/jfreechart/

GNU Lesser General Public License v2.1

1.2k stars 459 forks source link

CVE-2024-23077. #397

Closed trashgod closed 3 months ago

trashgod commented 5 months ago

In v1.5.x, add check and test for lower array bound to CompassPlot::setSeriesNeedle, mentioned in CVE-2024-23077 and CVE-2023-52070, raised in issue #396.

jfree commented 3 months ago

Thanks