6.9
Moyenne
CVE-2026-1188 In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all…
Description
In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounting for the separator inserted between processor features. If the output buffer supplied to this function was incorrectly sized, failing to account for the separator when determining when a write to the buffer was safe could lead to a buffer overflow. This issue is fixed in Eclipse OMR version 0.8.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Eclipse OMR 0.2 | 0.2.0 → < 0.8.0 | 0.8.0 |
Références
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Eclipse OMR
Les 4 CVE de Eclipse OMR →
CVE-2026-16243
In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes…
5.7
Moyenne
CVE-2025-1471
In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS atoe print functions use a constant length buffer for string…
7.1
Élevée
CVE-2025-1470
In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities consumers…
5.1
Moyenne