7.1
High
CVE-2025-1471 In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS atoe print functions use a constant length buffer for string…
Description
In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS atoe print functions use a constant length buffer for string conversion. If the input format string and arguments are larger than the buffer size then buffer overflow occurs. Beginning in version 0.5.0, the conversion buffers are sized correctly and checked appropriately to prevent buffer overflows.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Eclipse OMR 0.2 | 0.2.0 → < 0.4.0 | 0.4.0 |
Other CVEs of Eclipse OMR
The 4 CVEs of Eclipse OMR →
CVE-2026-16243
In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes…
5.7
Medium
CVE-2026-1188
In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all…
6.9
Medium
CVE-2025-1470
In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities consumers…
5.1
Medium