Insecure Memory Management in Eclipse OpenJ9 by Eclipse Foundation

CVE-2022-3676

What is CVE-2022-3676?

Eclipse OpenJ9 versions prior to 0.35.0 are susceptible to a vulnerability that allows for inline interfaces without proper runtime type checks. This flaw can be exploited by malicious bytecode, enabling attackers to access or alter memory spaces using incompatible types, which poses significant risks to application stability and security.

References