Skip to content
fr Sign in
6.9 Medium

CVE-2026-1188 In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all…

Description

In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounting for the separator inserted between processor features. If the output buffer supplied to this function was incorrectly sized, failing to account for the separator when determining when a write to the buffer was safe could lead to a buffer overflow. This issue is fixed in Eclipse OMR version 0.8.0.

Affected products and versions

Product Affected versions Fixed in
Eclipse OMR 0.2 0.2.0 → < 0.8.0 0.8.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Eclipse OMR

The 4 CVEs of Eclipse OMR →
CVE-2026-16243 In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes… 5.7 Medium CVE-2025-1471 In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS atoe print functions use a constant length buffer for string… 7.1 High CVE-2025-1470 In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities consumers… 5.1 Medium
Track this CVE