CVE-2024-23086 describes a reported stack overflow vulnerability in Apfloat v1.10.1's DoubleModMath::modPow(double) method. The vulnerability report is contested by multiple sources who argue that the evidence is not sufficient to confirm its existence, suggesting the initial finding may stem from an unreliable detection tool. No official patch or vendor advisory is available, and no affected versions have been explicitly identified. The CVSS 3.1 score of 9.8 reflects a critical impact rating based on the initial report, but the dispute lowers confidence in the validity of the vulnerability.

If the vulnerability is valid, it could allow an unauthenticated attacker to execute arbitrary code, cause denial of service, and compromise confidentiality, integrity, and availability due to a stack overflow in a core mathematical function. However, the lack of confirmed evidence and absence of known exploits in the wild reduce the certainty of this impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Due to the disputed nature of this report and no available patches or official advisories, no specific mitigation actions can be recommended at this time.