Buffer Underflow Vulnerability in Eclipse OpenJ9 by Eclipse Foundation
CVE-2026-16439

5.8MEDIUM

Key Information:

Vendor: Eclipse Foundation
Status: Openj9
Vendor: CVE Published:; 21 July 2026

🔔 Create Eclipse Foundation Vulnerability Alert

What is CVE-2026-16439?

In Eclipse OpenJ9 versions up to 0.60, an issue arises when using the -Xtrace option to trace method arguments, which may lead to a buffer underflow. This vulnerability can potentially result in unexpected behavior during program execution, affecting the stability and integrity of the applications relying on this product.

Affected Version(s)

OpenJ9 0.8.0 < 0.60.0

OpenJ9 0 < 0.8.0

OpenJ9 0.60.0

References

https://github.com/eclipse-openj9/openj9/pull/24394

https://gitlab.eclipse.org/security/cve-assignment/-/work...

CVSS V4

Score:

5.8

Severity:

MEDIUM

Confidentiality:

None

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

High

Attack Required:

Physical

Privileges Required:

Undefined

User Interaction:

Unknown

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 21, 2026
Vulnerability Reserved
Jul 21, 2026

CVE-2026-16439 Data

JSON