CVE-2026-1188mediumCWE-131

CVE-2026-1188: falha de média gravidade em Eclipse OMR

Publicada em

Seguir esta CVE+ Monitorar Eclipse OMR

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.5%
In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounting for the separator inserted between processor features. If the output buffer supplied to this function was incorrectly sized, failing to account for the separator when determining when a write to the buffer was safe could lead to a buffer overflow. This issue is fixed in Eclipse OMR version 0.8.0.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
Produtos afetados
Eclipse Foundation · Eclipse OMR
CVEs relacionadas — Eclipse OMR

No mesmo produto, das mais perigosas para as menos.

CVE-2026-16243MEDIUMEclipse OMR : arraycmp SIMD implementation does not check if the number of bytes to compare is zeroEPSS 0.5%CVE-2025-1471HIGHEclipse OMR: Buffer overflow vulnerabilityEPSS 0.2%CVE-2025-1470MEDIUMEclipse OMR: Null pointer dereference vulnerabilityEPSS 0.2%