{"id":"CVE-2025-4447","aliases":["EUVD-2025-14192","GHSA-wmvg-c6fc-33c8","RHSA-2025:8431","SUSE-SU-2025:01770-1","SUSE-SU-2025:01788-1","SUSE-SU-2025:01954-1","openSUSE-SU-2025:15231-1"],"status":"published","title":"Buffer Overflow in Eclipse OpenJ9","description":"In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts.","severity":{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:H/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00224,"percentile":0.13169,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-121"],"published":"2025-05-09T20:40:25Z","modified":"2026-10-28T02:30:57Z","fixes":[{"ecosystem":"openSUSE:Tumbleweed","package":"java-1_8_0-openj9","fixed_in":["1.8.0.452-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.45-1.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.45-1.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.45-1.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.45-1.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.45-1.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.45-1.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.45-1.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-webstart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.45-1.el8_10"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.45-30.135.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.45-30.135.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP6","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.45-150000.3.101.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.45-150000.3.101.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.45-150000.3.101.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.45-150000.3.101.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.45-150000.3.101.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.45-150000.3.101.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.45-150000.3.101.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.45-150000.3.101.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.45-150000.3.101.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.45-150000.3.101.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.45-150000.3.101.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.45-150000.3.101.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"java-1_8_0-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.452-150200.3.54.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"java-1_8_0-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.452-150200.3.54.2"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"java-1_8_0-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.452-150200.3.54.2"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_8_0-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.452-3.1"}]}]}],"products":[{"vendor":"eclipse","product":"openj9"},{"vendor":"eclipse foundation","product":"openj9"}],"references":[{"url":"https://gitlab.eclipse.org/security/cve-assignement/-/issues/61","tags":["Issue Tracking","Vendor Advisory","report","article"]},{"url":"https://github.com/eclipse-openj9/openj9/pull/21762","tags":["Issue Tracking","fix","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4447","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wmvg-c6fc-33c8"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/4xxx/CVE-2025-4447.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8431","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8431.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-4447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365395","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-4447","tags":["advisory"]},{"url":"https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities#IBM_Security_Update_May_2025","tags":["article"]},{"url":"https://www.ibm.com/support/pages/node/7233417","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359695","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21587","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21587","tags":["advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359693","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-30698","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30698","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501770-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1241274","tags":["report"]},{"url":"https://bugzilla.suse.com/1241275","tags":["report"]},{"url":"https://bugzilla.suse.com/1241276","tags":["report"]},{"url":"https://bugzilla.suse.com/1242208","tags":["report"]},{"url":"https://bugzilla.suse.com/1243429","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4447","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501788-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501954-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1235844","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-4447","title":"Buffer Overflow in Eclipse OpenJ9","description":"In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts.","status":"published","published":"2025-05-09T20:40:25.953Z","modified":"2025-05-10T01:46:54.369Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:H/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:32:48.167635Z"}],"euvd":[{"id":"EUVD-2025-14192","description":"In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts.","status":"published","published":"2025-05-09T20:40:25Z","modified":"2025-05-10T01:46:54Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:H/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T20:32:50.201515Z"}],"ghsa":[{"id":"GHSA-wmvg-c6fc-33c8","title":"In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer...","description":"In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts.","status":"published","published":"2025-05-09T21:31:19Z","modified":"2025-07-31T18:31:56Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T15:03:09.647668Z"}],"nvd":[{"id":"CVE-2025-4447","description":"In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts.","status":"published","published":"2025-05-09T21:15:51.41Z","modified":"2026-06-17T09:33:16.31Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:11:07.176032Z"}],"osv":[{"id":"CVE-2025-4447","title":"Buffer Overflow in Eclipse OpenJ9","description":"In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts.","status":"published","published":"2025-05-09T20:40:25.953Z","modified":"2026-10-28T02:30:57.757347454Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:H/SI:N/SA:N","level":"high"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T15:44:49.707645Z"},{"id":"RHSA-2025:8431","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2025-06-03T10:05:14Z","modified":"2026-10-16T10:09:25Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"openSUSE-SU-2025:15231-1","title":"java-1_8_0-openj9-1.8.0.452-3.1 on GA media","description":"These are all security issues fixed in the java-1_8_0-openj9-1.8.0.452-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:31.678644Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:01770-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 8 Fix Pack 45.\n\nSecurity issues fixed:\n\n- Oracle April 15 2025 CPU (bsc#1242208)\n\n  * CVE-2025-21587: unauthorized access, deletion and modification of critical data via the JSSE component\n    (bsc#1241274).\n  * CVE-2025-30691: unauthorized access to data via the Compiler component (bsc#1241275).\n  * CVE-2025-30698: unauthorized access to data and ability to cause a partial DoS via the 2D component (bsc#1241276).\n\n- IBM Security Update May 2025\n\n  * CVE-2025-4447: stack based buffer overflow in Eclipse OpenJ9 through modification of file that is read when the JVM\n    starts (bsc#1243429).\n\nOther changes and issues fixed:\n\n- Security:\n\n  * Avoid memory leak during aes cipher initialization operations\n    for IBMJCEPlus and IBMJCEPlusProviders provider.\n  * Changing the default of the com.ibm.security.spnego.msinterop\n    property from true to false.\n  * Deserializing a com.ibm.crypto.provider.rsaprivatecrtkey object\n    causes a java.io.invalidobjectexception to be thrown.\n  * Failed to read private key from a JKS keystore, specified as\n    JCEKS keystore.\n  * HTTPS channel binding support.\n  * Keytool listing PKCS12 keystore issue.\n  * On Linux systems, use gcc11.2 to compile IBM PKCS11 library.\n  * Support has been added to the IBM Java XMLDSigRI security provider\n    for the EdDSA (Edwards-curve Digital Signature Algorithm).\n  * Updates to XDH Key Agreement, AESGCM Algorithms in IBMJCEPlus\n    and IBMJCEPlusFIPS providers.\n\n- Class Libraries:\n\n  * Update timezone information to the latest tzdata2025a.\n\n- Java Virtual Machine:\n\n  * A SIGSEGV/GPF event received while processing verifyerror.\n  * Crash while resolving MethodHandleNatives.\n  * NoSuchMethodException or NoClassDefFoundError when loading classes.\n\n- JIT Compiler:\n\n  * Assert in the JIT Compiler, badILOp.\n  * Reduced MD5 performance.\n","status":"published","published":"2025-05-30T10:09:24Z","modified":"2026-03-23T04:48:29.154173Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01788-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 8 Fix Pack 45.\n\nSecurity issues fixed:\n\n- Oracle April 15 2025 CPU (bsc#1242208)\n\n  * CVE-2025-21587: unauthorized access, deletion and modification of critical data via the JSSE component\n    (bsc#1241274).\n  * CVE-2025-30691: unauthorized access to data via the Compiler component (bsc#1241275).\n  * CVE-2025-30698: unauthorized access to data and ability to cause a partial DoS via the 2D component (bsc#1241276).\n\n- IBM Security Update May 2025\n\n  * CVE-2025-4447: stack based buffer overflow in Eclipse OpenJ9 through modification of file that is read when the JVM\n    starts (bsc#1243429).\n\nOther changes and issues fixed:\n\n- Security:\n\n  * Avoid memory leak during aes cipher initialization operations\n    for IBMJCEPlus and IBMJCEPlusProviders provider.\n  * Changing the default of the com.ibm.security.spnego.msinterop\n    property from true to false.\n  * Deserializing a com.ibm.crypto.provider.rsaprivatecrtkey object\n    causes a java.io.invalidobjectexception to be thrown.\n  * Failed to read private key from a JKS keystore, specified as\n    JCEKS keystore.\n  * HTTPS channel binding support.\n  * Keytool listing PKCS12 keystore issue.\n  * On Linux systems, use gcc11.2 to compile IBM PKCS11 library.\n  * Support has been added to the IBM Java XMLDSigRI security provider\n    for the EdDSA (Edwards-curve Digital Signature Algorithm).\n  * Updates to XDH Key Agreement, AESGCM Algorithms in IBMJCEPlus\n    and IBMJCEPlusFIPS providers.\n\n- Class Libraries:\n\n  * Update timezone information to the latest tzdata2025a.\n\n- Java Virtual Machine:\n\n  * A SIGSEGV/GPF event received while processing verifyerror.\n  * Crash while resolving MethodHandleNatives.\n  * NoSuchMethodException or NoClassDefFoundError when loading classes.\n\n- JIT Compiler:\n\n  * Assert in the JIT Compiler, badILOp.\n  * Reduced MD5 performance.\n","status":"published","published":"2025-05-31T10:34:31Z","modified":"2026-03-23T04:46:22.568299Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01954-1","title":"Security update for java-1_8_0-openj9","description":"This update for java-1_8_0-openj9 fixes the following issues:\n\n- CVE-2025-4447: Fixed buffer overflow in Eclipse OpenJ9 (bsc#1243429).\n- CVE-2025-30698: Fixed 2D unauthorized data access and DoS (bsc#1241276).\n- CVE-2025-30691: Fixed Compiler Unauthorized Data Access (bsc#1241275).\n- CVE-2025-21587: Fixed unauthorized access, deletion or modification of critical data (bsc#1241274).\n\nOther bugfixes:\n\n- Fixed wrong execstack flag in libj9jit (bsc#1235844)\n","status":"published","published":"2025-06-13T13:56:03Z","modified":"2026-02-04T03:52:52.135961Z","updated_at":"2026-11-02T15:53:56.647031Z"}]}}