Eclipse Foundation OpenJ9: Eclipse OpenJ9: Buffer underflow via tracing method arguments

A flaw was found in Eclipse OpenJ9. When using the -Xtrace option to trace method arguments, a buffer underflow vulnerability can occur. This could potentially lead to memory corruption, impacting the integrity and availability of the application...

PT-2026-76412

These are all security issues fixed in the java-17-openj9-17.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11489-1 java-25-openj9-25.0.4.0-1.1 on GA media

These are all security issues fixed in the java-25-openj9-25.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11487-1 java-1_8_0-openj9-1.8.0.502-1.1 on GA media

These are all security issues fixed in the java-180-openj9-1.8.0.502-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11488-1 java-21-openj9-21.0.12.0-1.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.12.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11485-1 java-11-openj9-11.0.32.0-1.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.32.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11486-1 java-17-openj9-17.0.20.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-76415

These are all security issues fixed in the java-25-openj9-25.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-16441

A flaw was found in Eclipse OpenJ9. When executing specially crafted class files, the Java Virtual Machine JVM incorrectly delegates method calls from a recompiled abstract superclass method to an interface default method. This can lead to unexpected program behavior and potential data integrity...

CVE-2026-16439

A flaw was found in Eclipse OpenJ9. When using the -Xtrace option to trace method arguments, a buffer underflow vulnerability can occur. This could potentially lead to memory corruption, impacting the integrity and availability of the application...

Linux Distros Unpatched Vulnerability : CVE-2026-16441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is...

Linux Distros Unpatched Vulnerability : CVE-2026-16439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow. CVE-2026-16439 Note that Nessus relies on the...

CVE-2026-16441 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-11-openj9...

CVE-2026-16439 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-11-openj9...

GHSA-CP45-6Q6C-3772 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-11-openj9...

GHSA-PW53-4WCC-WM6V vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-11-openj9...

IBM Java 7.1 < 7.1.5.31 / 8.0 < 8.0.8.70 Multiple Vulnerabilities

The version of IBM Java installed on the remote host is 7.1 prior to 7.1.5.31 / 8.0 prior to 8.0.8.70. It is, therefore, affected by multiple vulnerabilities as referenced in the IBM Security Update July 2026 advisory. - In Eclipse OpenJ9 versions up to 0.60, when executing class files where a...

SUSE CVE-2026-16439

In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow...

SUSE CVE-2026-16441

In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method...

EUVD-2026-46359

In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method...