CVE-2024-20918

creationtimestamp| type| source ---|---|--- 2024-02-09 16:27:23+00:00| seen| https://t.me/ctinow/182128 2025-12-02 11:11:04+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m6ysnewav227...

Important: java-1.8.0-openjdk

Issue Overview: A vulnerability that allows an attacker to execute arbitrary java code from the javascript engine even though the option "--no-java" was set. CVE-2024-20918 With carefully crafted custom bytecodes, arbitrary unverified bytecodes could be executed. CVE-2024-20919 Loop optimizations...

CLSA-2024-1706696899 java-1.8.0-openjdk: Fix of 8 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop...