CVE-2026-110938

Publié : 21 octobre 2026

Modifié : 21 octobre 2026

Description détaillée

In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boundary checks during protocol message and reply handling. An unauthenticated remote attacker or malicious JITServer can transmit malformed network payloads that cause out-of-bounds heap reads, immediately crashing the JITServer daemon or client JVM process via a segmentation fault (SIGSEGV).

Références et Patchs

https://github.com/eclipse-openj9/openj9/pull/25011 https://gitlab.eclipse.org/security/cve-assignment/-/work_items/407 https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/943 https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/944 https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/946 https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/947

Dernières Vulnérabilités

CVE-2026-110884

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in geekontheroad Live Summary for Gravity Forms live-summary-for-gravity-forms allows Reflected XSS.This issue affects Live Summary for Gravity Forms: from n/a through 1.2.10.

VOIR DÉTAILS

CVE-2026-110370

Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/a through 1.9.2.

VOIR DÉTAILS

CVE-2026-110369

Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2.

VOIR DÉTAILS