CVE-2024-10917CWE-190

Eclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength

Low · published November 11, 2024

CVSS v3.1
3.7
EPSS
0%
Percentile
34.6
In the wild
Unconfirmed
What it is

In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00414 · 34.6th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2024-11-11T16:55Z
EPSS history
Timeline
  • 11 NOV 16:55Z
    Eclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength
    cvelistv5