OM
Product
Omr
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 1Low 0
Watch
Add Omr to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-1188 | 9.8 | Jan 29 | In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounting for the separator… Affected: 0.2 before 0.8.0 |
| CVE-2025-14549 | 8.1 | Dec 15 | In the Eclipse OMR compiler component, since release 0.7.0, an optimization enabled for Eclipse OpenJ9 consumers of OMR on Z processors incorrectly handles NUL (0x00) characters… Affected: 0.7.0 |
| CVE-2025-1471 | 7.8 | Feb 21 | In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS atoe print functions use a constant length buffer for string conversion Affected: 0.2.0 through 0.4.0 |
| CVE-2019-11773 | 7.8 | Sep 12 | Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection and privilege elevation by local users Affected: before 0.1 |
| CVE-2026-16243 | 7.5 | Jul 21 | Eclipse OMR : arraycmp SIMD implementation does not check if the number of bytes to compare is zero Affected: 0.1.0 through 0.10.0 |
| CVE-2019-11774 | 7.4 | Sep 12 | Prior to 0.1, all builds of Eclipse OMR contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is… Affected: before 0.1 |
| CVE-2025-1470 | 5.5 | Feb 21 | In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities consumers of z/OS atoe functions do not check their return values for… Affected: through 0.4.0 |
Showing 7