CVE-2024-10917

5.3 mediumEPSS 0.4%

Medium (5.3) in eclipse openj9. EPSS 0.4% chance of exploitation in the next 30 days.

In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-190
Published: 2024-11-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

eclipse:openj9

References

https://github.com/eclipse-openj9/openj9/pull/20362
https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.48.0
https://gitlab.eclipse.org/security/cve-assignement/-/issues/47

Check your stack JSON