VULNERABILITY INTELLIGENCE
CVE-2024-10917
CVSS score3.7 LOW
EPSS probability0.41%
CISA KEVNot currently listed
Published2024-11-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.
Weakness classification
- emo@eclipse.org: CWE-190
- nvd@nist.gov: CWE-190
Primary references
- emo@eclipse.org — Issue Tracking, Patch
- emo@eclipse.org — Release Notes
- emo@eclipse.org — Issue Tracking, Vendor Advisory