JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization
Impact
Eclipse OpenJ9 versions prior to 0.63.0 are vulnerable to a denial of service via a crafted network payload, causing an integer underflow and out-of-bounds heap read. An unauthenticated remote attacker can trigger a process crash. The weakness is due to insufficient validation in DataDescriptor deserialization.
Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.Affected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Eclipse Foundation · eclipse
Eclipse OpenJ9
1 range
Eclipse Foundation · eclipse
Eclipse OpenJ9
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0.8.0 → before 0.63
semver versions
Other versions: unaffected
Original source description
In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled _size, _paddingSize, and _dataOffset fields during DataDescriptor message deserialization. An unauthenticated remote attacker can send a crafted network payload that triggers an unsigned integer underflow in DataDescriptor::getPayloadSize() and DataDescriptor::getNextDescriptor(). This results in an out-of-bounds heap read and an immediate process crash (SIGSEGV), causing a denial of service.
Inside the record
Evidence available
Describes the evidence in this view, not whether the product is safe.
Original records
CVE-2026-111075View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.
cve.new JSON →Underlying weaknesses
The source’s classification of what caused the vulnerability.
Contributing organizations · 2
Assigning organization
Additional data publisher
What changed
Follow changesLarge field values are marked as truncated previews. Original source snapshots remain retained.