CVE-2019-10245CWE-20

In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes

published April 19, 2019

CVSS
—
EPSS
2%
Percentile
84.5
In the wild
Unconfirmed
What it is

In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02492 · 84.5th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2019-04-19T13:43Z
EPSS history
Timeline
  • 19 APR 13:43Z
    In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes
    cvelistv5