Approved changes feed: RSS · Atom

cpe:2.3:a:eclipse:openj9:0.21.0:milestone1:*:*:*:*:*:*

part: a version: 0.21.0 update: milestone1

VendorEclipse (fa988180-604e-5c1f-93ea-65b5297000fc)
ProductOpenj9 (c58ac148-f063-578a-9aac-97c1088d62b9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/eclipse/openj9 purl2cpe 2026-06-01 10:15:02.571971

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-17639 vulnerable 2026-06-08 05:13:10.899189 Details available
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
Published: 2020-07-15T21:19:31.000Z
Updated: 2024-08-05T01:47:13.522Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.