EUVD-2024-32500

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Eclipse OpenJ9 versions before 0.44.0 may allow memory access errors during arraycopy on IBM Z.

Reporter	Title	Published	Views	Family All 58
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management Core Framework.	11 Sep 202411:24	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities Addressed in IBM Tivoli Network Manager IP Edition (ITNM) version 4.2 Fix Pack 20 (4.2.0.20)	11 Nov 202411:31	–	ibm
IBM Security Bulletins	Security Bulletin: Out of bound read/write access vulnerability in IBM® SDK, Java™ Technology Edition version 8 may affect IBM Storage Protect Operations Center (CVE-2024-3933)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.	27 Aug 202417:15	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2024-3933 affects IBM® SDK, Java™ Technology Edition	30 May 202413:50	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of IBM SDK, Java Technology Edition, IBM Tivoli Application Dependency Discovery Manager is vulnerable to multiple vulnerabilities.	4 Dec 202406:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	18 Sep 202410:14	–	ibm
IBM Security Bulletins	Security Bulletin: The IBM® Engineering Lifecycle Engineering product using the -Xgc:concurrentScavenge option on IBM Z is vulnerable to Buffer overflow in GC	9 Aug 202404:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Java SDK and IBM Java Runtime for IBM i are vulnerable to a denial of service and bypassing security restrictions due to multiple vulnerabilities.	9 Jul 202414:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for July 2024.	8 Aug 202417:17	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "86133054-4560-3be8-b7f1-9e64155aafab",
        "vendor": {
          "name": "Eclipse Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "18cd22cc-12d0-30c0-bf98-998d9d788c04",
        "product": {
          "name": "Open J9"
        },
        "product_version": "0.13.0 <0.44.0"
      }
    ]
  }
]

Source	Link
gitlab	www.gitlab.eclipse.org/security/cve-assignement/-/issues/21
github	www.github.com/eclipse/omr/pull/7275

03 Oct 2025 20:07Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.15.3 - 7.3

EPSS0.00068

SSVC