CVE-2026-111075

In Eclipse OpenJ9 versions prior to 0.63.0 , a vulnerability exists in the JITServer component due to missing cross-field validation on _size, _paddingSize, and _dataOffset fields during DataDescriptor message deserialization. An unauthenticated remote attacker can provide a crafted network paylo...