Unsafeaccessor
Approved changes feed: RSS · Atom
cpe:2.3:a:karlatemp:unsafeaccessor:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Karlatemp (66d9b4f3-ef6f-59f5-a7b3-222765e67eb4) |
|---|---|
| Product | Unsafeaccessor (4603f01a-53ef-525c-b457-1ba56ee80680) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-31139 |
vulnerable | 2026-06-08 05:43:40.272435 |
No security checking for UnsafeAccess.getInstance() in UnsafeAccessor
MEDIUM (5.9)
UnsafeAccessor (UA) is a bridge to access jdk.internal.misc.Unsafe & sun.misc.Unsafe. Normally, if UA is loaded as a named module, the internal data of UA is protected by JVM and others can only access UA via UA's standard API. The main application can set up `SecurityCheck.AccessLimiter` for UA to limit access to UA. Starting with version 1.4.0 and prior to version 1.7.0, when `SecurityCheck.AccessLimiter` is set up, untrusted code can access UA without limitation, even when UA is loaded as a named module. This issue does not affect those for whom `SecurityCheck.AccessLimiter` is not set up. Version 1.7.0 contains a patch.
Published: 2022-07-11T18:25:11.000Z
Updated: 2025-04-23T18:03:51.382Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.