VULNERABILITY INTELLIGENCE

CVE-2024-10917

CVSS score3.7 LOW
EPSS probability0.41%
CISA KEVNot currently listed
Published2024-11-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.

Weakness classification

  • emo@eclipse.org: CWE-190
  • nvd@nist.gov: CWE-190

Primary references