CVE-2024-23084 describes a potential ArrayIndexOutOfBoundsException in Apfloat v1.10.1 within the DoubleCRTMath::add method. This vulnerability is categorized under CWE-129 (Improper Validation of Array Index). The CVSS 3.1 score is 7.5 (high severity) due to the potential for denial of service (availability impact) with network attack vector, low attack complexity, and no required privileges or user interaction. However, the existence of this vulnerability is disputed by multiple third parties citing insufficient evidence, possibly due to limitations in the detection tool used. No vendor advisory or patch information is available, and no known exploits have been reported.

If the vulnerability is valid, it could cause an application crash or denial of service through an unhandled ArrayIndexOutOfBoundsException. There is no indication of confidentiality or integrity impact. The attack vector is network-based with no privileges or user interaction required, making it potentially exploitable remotely. However, the dispute over the vulnerability's existence reduces confidence in the impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or vendor advisory is available, users should monitor official Apfloat communications for updates. Given the dispute over the vulnerability's validity, immediate action may not be necessary until further confirmation.