CVE-2026-1188mediumCWE-131

CVE-2026-1188: fallo de gravedad media en Eclipse OMR

Publicada el

Seguir esta CVE+ Monitorear Eclipse OMR

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.9epss 0.5%
In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounting for the separator inserted between processor features. If the output buffer supplied to this function was incorrectly sized, failing to account for the separator when determining when a write to the buffer was safe could lead to a buffer overflow. This issue is fixed in Eclipse OMR version 0.8.0.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
Productos afectados
Eclipse Foundation · Eclipse OMR
CVEs relacionadas — Eclipse OMR

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-16243MEDIUMEclipse OMR : arraycmp SIMD implementation does not check if the number of bytes to compare is zeroEPSS 0.5%CVE-2025-1471HIGHEclipse OMR: Buffer overflow vulnerabilityEPSS 0.2%CVE-2025-1470MEDIUMEclipse OMR: Null pointer dereference vulnerabilityEPSS 0.2%