CVE-2024-10917: In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is…

PriorityP424medium5.3CVSS 3.1

AVNACLPRNUINSUCNILAN

EPSS

0.42%

34.6th percentile

In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
eclipse	openj9	>= 0.8.0 < 0.48.0	0.48.0
eclipse_foundation	open_j9	0.8.0 – 0.47.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.