Approved changes feed: RSS · Atom

cpe:2.3:a:the_eclipse_foundation:eclipse_openj9:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThe Eclipse Foundation (bb2d55d2-5306-5bc8-beb2-981f5d5392e4)
ProductEclipse Openj9 (23a2e96c-4f01-50a4-8ba0-0af5dded7993)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3676 vulnerable 2026-06-08 05:48:21.643610 Details available
In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.
Published: 2022-10-24T00:00:00.000Z
Updated: 2025-05-07T15:59:25.715Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41041 vulnerable 2026-06-08 05:35:19.550357 Details available
In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles.
Published: 2022-04-27T02:10:10.000Z
Updated: 2024-08-04T02:59:31.309Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28167 vulnerable 2026-06-08 05:31:23.102956 Details available
In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases to pre-resolve certain constant pool entries. This allows a user to call static methods or access static members without running the class initialization method, and may allow a user to observe uninitialized values.
Published: 2021-04-21T17:30:16.000Z
Updated: 2024-08-03T21:40:12.207Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27221 vulnerable 2026-06-08 05:23:52.402985 Details available
In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding.
Published: 2021-01-21T04:55:11.000Z
Updated: 2024-08-04T16:11:35.952Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17639 vulnerable 2026-06-08 05:13:10.897269 Details available
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
Published: 2020-07-15T21:19:31.000Z
Updated: 2024-08-05T01:47:13.522Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17631 vulnerable 2026-06-08 05:13:10.879510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11775 vulnerable 2026-06-08 05:12:38.092012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11772 vulnerable 2026-06-08 05:12:38.089060 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11771 vulnerable 2026-06-08 05:12:38.088084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10245 vulnerable 2026-06-08 05:12:22.916691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12549 vulnerable 2026-06-08 05:10:41.751240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12548 vulnerable 2026-06-08 05:10:41.749045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12547 vulnerable 2026-06-08 05:10:41.747263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12539 vulnerable 2026-06-08 05:10:41.686617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.