Eclipse Foundation Openj9 vulnerabilities

• eclipse foundation openj9 JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing CVE-2026-110938 8.7 HighOctober 21, 2026
• eclipse foundation openj9 JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization CVE-2026-111075 8.7 HighOctober 21, 2026
• eclipse foundation openj9 JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity() CVE-2026-111074 8.7 HighOctober 21, 2026
• eclipse foundation openj9 jdmpview / DTFJ reads arbitrary local files and makes arbitrary outbound requests when opening a third-party diagnostic dump bundle (XXE in XMLIndexReader) CVE-2026-97400 6.8 MediumOctober 20, 2026
• eclipse foundation openj9 In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations... CVE-2026-16440 5.7 MediumAugust 19, 2026
• eclipse openj9 Eclipse OpenJ9 : Method resolution default method precedence failure CVE-2026-16441 6.9 MediumJuly 21, 2026
• eclipse openj9 Eclipse OpenJ9 : Using -Xtrace to trace method arguments can lead to buffer underflow CVE-2026-16439 5.8 MediumJuly 21, 2026
• eclipse openj9, red hat enterprise linux 10, enterprise linux 10.0 extended update support +1 more +3 more Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update CVE-2026-6918 8.7 HighMay 5, 2026
• eclipse openj9 Buffer Overflow in Eclipse OpenJ9 CVE-2025-4447 Fix available 7.0 HighMay 9, 2025
• eclipse openj9 Eclipse OpenJ9 possible infinite busy hang CVE-2023-5676 4.1 MediumNovember 15, 2023
• eclipse openj9 In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is... CVE-2023-2597 7.0 HighMay 22, 2023
• eclipse openj9, the eclipse foundation eclipse openj9 +1 more In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type... CVE-2022-3676 Fix available 6.5 MediumOctober 24, 2022
• eclipse openj9, the eclipse foundation eclipse openj9, oracle java se +2 more In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during... CVE-2021-41041 5.3 MediumApril 27, 2022
• eclipse openj9, the eclipse foundation eclipse openj9 +1 more In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes... CVE-2021-28167 6.5 MediumApril 21, 2021
• eclipse openj9, the eclipse foundation eclipse openj9 +1 more In Eclipse OpenJ9 up to version 0.23, there is potential for a stack-based buffer overflow when... CVE-2020-27221 9.8 CriticalJanuary 21, 2021
• eclipse openj9, the eclipse foundation eclipse openj9 +1 more In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method... CVE-2019-17639 5.3 MediumJuly 15, 2020
• eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +5 more +7 more From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or... CVE-2019-17631 9.1 CriticalOctober 17, 2019
• eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 more All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to... CVE-2019-11775 7.4 HighJuly 30, 2019
• eclipse openj9, the eclipse foundation eclipse openj9 +1 more In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not... CVE-2019-11772 9.8 CriticalJuly 17, 2019
• eclipse openj9, the eclipse foundation eclipse openj9 +1 more AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code... CVE-2019-11771 7.8 HighJuly 17, 2019
• eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +4 more +6 more In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a... CVE-2019-10245 7.5 HighApril 19, 2019
• eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 more In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on... CVE-2018-12549 9.8 CriticalFebruary 11, 2019
• eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 more In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native... CVE-2018-12547 9.8 CriticalFebruary 11, 2019
• eclipse openj9, the eclipse foundation eclipse openj9 +1 more In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto... CVE-2018-12548 9.8 CriticalJanuary 31, 2019
• eclipse openj9, the eclipse foundation eclipse openj9, oracle enterprise manager base platform +2 more In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach... CVE-2018-12539 7.8 HighAugust 14, 2018