Array Comparison Vulnerability in Eclipse OMR by Eclipse
CVE-2026-16243

5.7MEDIUM

Key Information:

Vendor

Eclipse Foundation

Status
Eclipse Omr
Vendor
CVE Published:
21 July 2026

What is CVE-2026-16243?

Eclipse OMR versions up to 0.11 contain a vulnerability in the array comparison SIMD implementation for Z and P architectures. This flaw occurs due to a lack of validation for the number of bytes designated for comparison, which may result in incorrect or undefined behavior during execution. Attackers could exploit this vulnerability to manipulate byte comparisons, potentially leading to unintended data exposure or corruption.

Affected Version(s)

Eclipse OMR 0.1 < 0.11

Eclipse OMR 0 < 0.1

Eclipse OMR 0.11

References

https://github.com/eclipse-omr/omr/pull/8349
https://github.com/eclipse-omr/omr/pull/8348
https://gitlab.eclipse.org/security/cve-assignment/-/work...

CVSS V4

Score:
5.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.