eclipse omr vulnerabilities (CVE)

CVE records published for eclipse omr, newest first. Follow to get an email when a new one appears.

5 results
6.9Medium
CVE-2026-1188
Eclipse Foundation Eclipse OMR

In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounting for the separator inserted between processor features. If the output buffer supplied to this func…

6.9Medium
CVE-2025-14549

OMR on Z processors Exposing a possible buffer over-read problem

Eclipse OMR Eclipse OMR

In the Eclipse OMR compiler component, since release 0.7.0, an optimization enabled for Eclipse OpenJ9 consumers of OMR on Z processors incorrectly handles NUL (0x00) characters during the Latin-compatible charset (UTF-8, ISO8859-1, ASCII, etc) to IBM-1047/03…

7.1High
CVE-2025-1471

Eclipse OMR: Buffer overflow vulnerability

Eclipse Foundation Eclipse OMR

In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS atoe print functions use a constant length buffer for string conversion. If the input format string and arguments are larger than the buffer size then buffer overflow occurs. Beginning in version 0.5.0…

5.1Medium
CVE-2025-1470

Eclipse OMR: Null pointer dereference vulnerability

Eclipse Foundation Eclipse OMR

In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities consumers of z/OS atoe functions do not check their return values for NULL memory pointers or for memory allocation failures. This can lead to NULL p…