CVE-2024-10917: low-severity vulnerability in Eclipse Foundation Open J9
Eclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.7epss 0.4%
In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Eclipse Foundation · Open J9Related CVEs — Eclipse Foundation Open J9
In the same product, most dangerous first.