CVE-2018-12548

2019-01-3120:00:00

CWE-822

eclipse

www.cve.org

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.3%

JSON

In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer values that are dereferenced in the native code.

CNA Affected

[
  {
    "product": "Eclipse OpenJ9",
    "vendor": "The Eclipse Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "0.11.0"
      }
    ]
  }
]

References

bugs.eclipse.org/bugs/show_bug.cgi?id=543792