CVE-2020-17361

CVE-2020-17361 affects ReadyTalk Avian 1.2.0. The issue is in vm::arrayCopy (classpath-common.h): when a negative length is provided, the method returns silently instead of throwing, which can cause data loss in the destination buffer depending on subsequent use. Notes from connected sources indi...

CVE-2020-17360

CVE-2020-17360 (ReadyTalk Avian 1.2.0) : The vm::arrayCopy boundary checks in classpath-common.h contain integer overflow in two checks, bypassing bounds verification and enabling out-of-bounds reads/writes. This affects Avian JVM 1.2.0 and is noted as impacting products no longer maintained by t...

CVE-2020-28371

ReadyTalk Avian 1.2.0 (before 2020-10-27) is affected by CVE-2020-28371 due to an integer overflow in FileOutputStream.write() that bypasses the boundary check, enabling out-of-bounds memory read/write. The vulnerability affects the FileOutputStream.java boundary-check logic and could cause memor...