Every CVE Search/ Get API key

OSV-2024-372

Security exception in java.base/java.util.Arrays.copyOf

No score

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67413

Crash type: Security exception
Crash state:
java.base/java.util.Arrays.copyOf
java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal
java.base/java.lang.AbstractStringBuilder.append

What each source reports

OSV No score

Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67413

Crash type: Security exception
Crash state:
java.base/java.util.Arrays.copyOf
java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal
java.base/java.lang.AbstractStringBuilder.append
Record
OSV-2024-372
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
apache-poi
OSS-Fuzz
Listed versions, plus commit ranges
REL_5_5_0REL_5_5_1REL_6_0_0REL_5_4_1REL_5_4_0REL_5_3_0REL_5_2_5REL_5_2_4
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2024-372 is a vulnerability with no CVSS score yet in apache-poi, published April 30, 2024. No source lists public exploit code. No source names a fixed version.

References

MoveEnter Open