Known vulnerabilities in OpenJ9 0.33.0-rc1a

Vendor: Eclipse
Software: OpenJ9
Version: 0.33.0-rc1a
Software CPE: cpe:2.3:a:eclipse:openj9:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting OpenJ9 version 0.33.0-rc1a OpenJ9 0.33.0-rc1a is affected by 6 vulnerabilities: 2 high, 3 medium, 1 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144400 - Uncontrolled Recursion
CVE-2026-16440
CWE-674 Low
No
No
0.61.0 19.08.2026 SB20260819144
SB2026091031
SB2026091115
#VU130954 - Out-of-bounds read
CVE-2026-6918
CWE-125 Medium
No
No
0.59.0 11.05.2026 SB2026051152
SB20260528261
SB2026060168
and 12 more
#VU112132 - Stack-based buffer overflow
CVE-2025-4447
CWE-121 Medium
No
No
0.51.0 03.07.2025 SB2025070315
SB2025070316
SB2025070319
and 54 more
#VU75888 - Integer overflow
CVE-2023-2004
CWE-190 High
No
No
0.38.0 09.05.2023 SB2023050976
SB2023050989
SB2023060845
and 34 more
#VU68844 - Type confusion
CVE-2022-3676
CWE-843 Medium
No
No
0.35.0 31.10.2022 SB2022103129
SB2022111110
SB2022111724
and 60 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434
CWE-122 High
Public exploit available
No
0.35.0 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more