Description (CNA)
In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The Eclipse Foundation / Eclipse OpenJ9 | affected unspecified before 0.35.0 |
CWE
CWE-20, CWE-843
References
- https://github.com/eclipse-openj9/openj9/pull/16122
- https://github.com/eclipse/omr/pull/6773
- https://gitlab.eclipse.org/eclipsefdn/emo-team/emo/-/issues/389
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.