CVE-2018-12549
In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - emo@eclipse.org
- Published
- 2019-02-11
- Last modified
- 2024-08-05
- Weaknesses
- CWE-111, CWE-20
Affected products
- Openj9 (Eclipse)
- Enterprise Linux Desktop (Redhat)
- Enterprise Linux Server (Redhat)
- Enterprise Linux Workstation (Redhat)
- Satellite (Redhat)
- Eclipse Openj9 (The Eclipse Foundation)
References
- https://access.redhat.com/errata/RHSA-2019:0469
- https://access.redhat.com/errata/RHSA-2019:0472
- https://access.redhat.com/errata/RHSA-2019:0640
- https://access.redhat.com/errata/RHSA-2019:1238
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=544019
