Skip to content
Eclipse Openj9 vulnerabilities
-
eclipse openj9
Eclipse OpenJ9 : Method resolution default method precedence failure
CVE-2026-16441
6.9 Medium
-
eclipse openj9
Eclipse OpenJ9 : Using -Xtrace to trace method arguments can lead to buffer underflow
CVE-2026-16439
5.8 Medium
-
eclipse openj9, red hat enterprise linux 10, enterprise linux 10.0 extended update support +1 more +3 more
Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update
CVE-2026-6918
8.7 High
-
eclipse openj9
Buffer Overflow in Eclipse OpenJ9
CVE-2025-4447
Fix available
7.0 High
-
eclipse openj9, eclipse foundation open j9 +1 more
Eclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength
CVE-2024-10917
3.7 Low
-
eclipse openj9, eclipse foundation open j9 +1 more
Eclipse Open J9 With -Xgc:concurrentScavenge on IBM Z, could write/read outside of a buffer
CVE-2024-3933
5.3 Medium
-
eclipse openj9
Eclipse OpenJ9 possible infinite busy hang
CVE-2023-5676
4.1 Medium
-
eclipse openj9
In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is...
CVE-2023-2597
7.0 High
-
eclipse openj9, the eclipse foundation eclipse openj9 +1 more
In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type...
CVE-2022-3676
Fix available
6.5 Medium
-
eclipse openj9, the eclipse foundation eclipse openj9, oracle java se +2 more
In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during...
CVE-2021-41041
5.3 Medium
-
eclipse openj9, eclipse foundation omr, the eclipse foundation eclipse omr +2 more
In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for...
CVE-2021-41035
9.8 Critical
-
eclipse openj9, the eclipse foundation eclipse openj9 +1 more
In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes...
CVE-2021-28167
6.5 Medium
-
eclipse openj9, the eclipse foundation eclipse openj9 +1 more
In Eclipse OpenJ9 up to version 0.23, there is potential for a stack-based buffer overflow when...
CVE-2020-27221
9.8 Critical
-
eclipse openj9, the eclipse foundation eclipse openj9 +1 more
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method...
CVE-2019-17639
5.3 Medium
-
eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +5 more +7 more
From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or...
CVE-2019-17631
9.1 Critical
-
eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 more
All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to...
CVE-2019-11775
7.4 High
-
eclipse openj9, the eclipse foundation eclipse openj9 +1 more
In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not...
CVE-2019-11772
9.8 Critical
-
eclipse openj9, the eclipse foundation eclipse openj9 +1 more
AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code...
CVE-2019-11771
7.8 High
-
eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +4 more +6 more
In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a...
CVE-2019-10245
7.5 High
-
eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 more
In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on...
CVE-2018-12549
9.8 Critical
-
eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 more
In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native...
CVE-2018-12547
9.8 Critical
-
eclipse openj9, the eclipse foundation eclipse openj9 +1 more
In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto...
CVE-2018-12548
9.8 Critical
-
eclipse openj9, the eclipse foundation eclipse openj9, oracle enterprise manager base platform +2 more
In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach...
CVE-2018-12539
7.8 High