5.7
Medium
CVE-2026-16243 In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes…
Description
In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes to compare is zero.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Eclipse OMR 0.11 | earliest → < 0.11 | 0.11 |
| Eclipse OMR 0.1 | 0.1 → < 0.11 | 0.11 |
Other CVEs of Eclipse OMR
The 4 CVEs of Eclipse OMR →
CVE-2026-1188
In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all…
6.9
Medium
CVE-2025-1471
In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS atoe print functions use a constant length buffer for string…
7.1
High
CVE-2025-1470
In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities consumers…
5.1
Medium