CVE-2024-10917

Description

In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.

Reserved 2024-11-06 | Published 2024-11-11 | Updated 2024-11-12 | Assigner eclipse

Problem types

CWE-190 Integer Overflow or Wraparound

Product status

Default status
unaffected

0.8.0
affected

References

gitlab.eclipse.org/security/cve-assignement/-/issues/47

github.com/eclipse-openj9/openj9/pull/20362

github.com/eclipse-openj9/openj9/releases/tag/openj9-0.48.0

cve.org (CVE-2024-10917)

nvd.nist.gov (CVE-2024-10917)

Download JSON