OP
Product
Openj9
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 7Medium 6Low 0
Watch
Add Openj9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-3676 | 6.5 | Oct 24 | In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check Affected: before 0.35.0 |
| CVE-2021-28167 | 6.5 | Apr 21 | In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases to pre-resolve certain constant pool entries Affected: through 0.25.0 |
| CVE-2023-5676 | 5.9 | Nov 15 | In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is… Affected: before 0.41.0 |
| CVE-2024-10917 | 5.3 | Nov 11 | In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around Affected: 0.8.0 before 0.48.0 |
| CVE-2021-41041 | 5.3 | Apr 27 | In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation,… Affected: before 0.32.0 |
| CVE-2019-17639 | 5.3 | Jul 15 | In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in… Affected: through 0.20.0; 0.21.0; 0.21.0; 0.21.0 |
Showing 6