OpenJDK: Out-of-bounds access in 2D image handling (8324559)

🗓️ 16 Jul 2024 22:11:36Reported by RedHatType

OpenJDK 2D image handling has out-of-bounds access allowing unauthenticated network attacks to read or modify data.

Reporter	Title	Published	Views	Family All 405
ibm	Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments	13 Feb 202510:18	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Business Service Manager	17 Sep 202420:19	–	ibm
ibm	Security Bulletin: IBM Common Licensing using IBM® SDK, Java™ Technology Edition vulnerable to CVEs	18 Nov 202410:34	–	ibm
ibm	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues	15 Apr 202505:41	–	ibm
ibm	Security Bulletin: multiple vulerability in IBM Spectrum Symphony with IBM JRE	23 Oct 202520:16	–	ibm
ibm	Security Bulletin: Multiple security vulnerabilities were discovered in IBM Verify Identity Governance	6 Feb 202506:16	–	ibm
ibm	Security Bulletin: IBM App Connect Enterprise has multiple vulnerabilities due to IBM Semeru Runtime (CVE-2024-21131, CVE-2024-21144, CVE-2024-21145)	20 Sep 202415:57	–	ibm
ibm	Security Bulletin: Multiple Vulnerabilities in Java affecting IBM Knowledge Catalog On Cloud Pak for Data	23 Oct 202410:42	–	ibm
ibm	Security Bulletin: There are multiple vulnerabilities that affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.	11 Oct 202411:22	–	ibm
ibm	Security Bulletin: IBM Sterling Connect:Direct Web Services is affected by multiple IBM JRE vulnerabilities	12 Nov 202405:35	–	ibm

Vulners

Node

AND

Source	Link
access	www.access.redhat.com/security/cve/CVE-2024-21145
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-21145
cve	www.cve.org/CVERecord

01 Jul 2026 13:57Current

7.4High risk

Vulners AI Score7.4

CVSS 3.14.8

EPSS0.00864

SSVC