OSV-2024-278
Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
No score
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68092
Crash type: Security exception
Crash state:
com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
java.base/java.nio.HeapCharBuffer.<init>
java.base/java.nio.CharBuffer.wrap
What each source reports
OSV No score
Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68092
Crash type: Security exception
Crash state:
com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
java.base/java.nio.HeapCharBuffer.<init>
java.base/java.nio.CharBuffer.wrap
- Record
OSV-2024-278- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
checkstyleOSS-Fuzz |
Listed versions, plus commit ranges checkstyle-10.16.0checkstyle-10.17.0checkstyle-10.18.0checkstyle-10.18.1checkstyle-10.18.2 Show 45 moreShow lesscheckstyle-10.19.0checkstyle-10.20.0checkstyle-10.20.1checkstyle-10.20.2checkstyle-10.21.0checkstyle-10.21.1checkstyle-10.21.2checkstyle-10.21.3checkstyle-10.21.4checkstyle-10.22.0checkstyle-10.23.0checkstyle-10.23.1checkstyle-10.24.0checkstyle-10.25.0checkstyle-10.25.1checkstyle-10.26.0checkstyle-10.26.1checkstyle-11.0.0checkstyle-11.0.1checkstyle-11.1.0checkstyle-12.0.0checkstyle-12.0.1checkstyle-12.1.0checkstyle-12.1.1checkstyle-12.1.2checkstyle-12.2.0checkstyle-12.3.0checkstyle-12.3.1checkstyle-13.0.0checkstyle-13.1.0checkstyle-13.2.0checkstyle-13.3.0checkstyle-13.4.0checkstyle-13.4.1checkstyle-13.4.2checkstyle-13.5.0checkstyle-13.6.0checkstyle-13.7.0checkstyle-13.8.0checkstyle-13.9.0checkstyle-13.10.0checkstyle-13.11.0checkstyle-14.0.0checkstyle-14.1.0checkstyle-14.2.0 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2024-278 is a vulnerability with no CVSS score yet in checkstyle, published April 19, 2024. No source lists public exploit code. No source names a fixed version.
References
This page doesn't list everything
Left out here: 2 versions. The JSON record has them.