Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-3676
6.5
MEDIUMCVSS v3
Severity scale
010
Description
In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.
eclipse-omr/omr
GitHubEclipse OMR™ Cross platform components for building reliable, high performance language runtimes
GitHubEclipse OMR™ Cross platform components for building reliable, high performance language runtimesNVD
eclipse-openj9/openj9GitHubEclipse OpenJ9: A Java Virtual Machine for OpenJDK that's optimized for small footprint, fast start-up, and high throughput. Builds on Eclipse OMR (https://github.com/eclipse/omr) and combines with the Extensions for OpenJDK for OpenJ9 repo.
GitHubEclipse OpenJ9: A Java Virtual Machine for OpenJDK that's optimized for small footprint, fast start-up, and high throughput. Builds on Eclipse OMR (https://github.com/eclipse/omr) and combines with the Extensions for OpenJDK for OpenJ9 repo.< 0.35.0NVD