OpenJ9 vulnerabilities
4 known vulnerabilities in OpenJ9 from Eclipse Foundation. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.6 Critical severity
OpenJ9: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method.
- 7.8 High severity
OpenJ9: Stack-based Buffer Overflow
In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts.
- 7.3 High severity
Open J9: Out-of-bounds Read
In Eclipse OpenJ9 release versions prior to 0.44.0 and after 0.13.0, when running with JVM option -Xgc:concurrentScavenge, the sequence generated for System.arrayCopy on the IBM Z platform with hardware and software support for guarded storage [1], could allow
- 9.1 Critical severity
Eclipse OpenJ9: Out-of-bounds Read
In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in OpenJ9 builds) the size of a string is not properly checked against the size of the buffer.