Eclipse OMR vulnerabilities

2 known vulnerabilities in Eclipse OMR from Eclipse Foundation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Eclipse OMR: Buffer Copy without Checking Size of Input

  CVE-2026-1188Jan 29, 2026Eclipse Foundation

  In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounting for the separator inserted between processor features. If the output buffer supplied to this funct

• 7.8 High severity

  Eclipse OMR: Out-of-bounds Write

  CVE-2025-1471Feb 21, 2025Eclipse Foundation

  In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS atoe print functions use a constant length buffer for string conversion. If the input format string and arguments are larger than the buffer size then buffer overflow occurs. Beginning in version 0.5.0,