| CVE-2022-3676 |
In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check
|
6.5
Medium
|
Oct 24, 2022 |
| CVE-2021-41041 |
In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification…
|
Not rated
|
Apr 27, 2022 |
| CVE-2021-28167 |
In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases…
|
Not rated
|
Apr 21, 2021 |
| CVE-2020-27221 |
In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the…
|
Not rated
|
Jan 21, 2021 |
| CVE-2019-17639 |
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer…
|
Not rated
|
Jul 15, 2020 |
| CVE-2019-17631 |
From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are…
|
Not rated
|
Oct 17, 2019 |
| CVE-2019-11775 |
All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that…
|
Not rated
|
Jul 30, 2019 |
| CVE-2019-11772 |
In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided…
|
Not rated
|
Jul 17, 2019 |
| CVE-2019-11771 |
AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege…
|
Not rated
|
Jul 17, 2019 |
| CVE-2019-10245 |
In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past…
|
Not rated
|
Apr 19, 2019 |
| CVE-2018-12549 |
In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an…
|
Not rated
|
Feb 11, 2019 |
| CVE-2018-12547 |
In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length…
|
Not rated
|
Feb 11, 2019 |
| CVE-2018-12548 |
In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains…
|
Not rated
|
Jan 31, 2019 |
| CVE-2018-12539 |
In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an…
|
Not rated
|
Aug 14, 2018 |