In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault.
CVSS Details
- CVSS 4.0 Base Score: 5.7 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ibm Java | — | Upgrade IBM Java to version 7.1.5.31Upgrade IBM Java to version 8.0.8.70 | Aug 27, 2026 | Aug 19, 2026 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Aug 19, 2026 | Aug 19, 2026 |
| Redhat_linux | — | Upgrade java-21-ibm-semeru-certified-jdk-jmodsUpgrade java-21-ibm-semeru-certified-jdk-srcUpgrade java-21-ibm-semeru-certified-jdkUpgrade java-21-ibm-semeru-certified-jdk-headlessUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibm-srcUpgrade java-21-ibm-semeru-certified-jdk-develUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-plugin | Aug 31, 2026 | Aug 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub