Security Advisory

CVE-2022-3676

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-10-24 00:00:00
Last updated 2025-05-07 15:59:25
Assigner eclipse
CVSS score not scored
State PUBLISHED

Description

In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.