Eclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.7epss 0.4%
exploitation probability
0.4%top 65% of all CVEs
observed exploitation
nono source reports it
In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Eclipse Foundation · Open J9