In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ibm Aix | — | Apply the fix or workaround for java_apr2025_advisory | Apr 28, 2025 | Nov 11, 2024 |
| Ibm Java | — | Upgrade IBM Java to version 7.1.5.24Upgrade IBM Java to version 8.0.8.35 | Nov 11, 2024 | Nov 11, 2024 |
| Suse | — | Upgrade java-1_8_0-ibm-32bitUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-ibm-devel-32bitUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-ibm-demoUpgrade java-1_8_0-ibmUpgrade java-1_8_0-ibm-src | Dec 5, 2025 | Feb 24, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub