Segmentation Fault Vulnerability in Eclipse OpenJ9 Affecting Java Environments
CVE-2026-16440

5.7MEDIUM

Key Information:

Vendor: Eclipse Foundation
Status: Eclipse Openj9
Vendor: CVE Published:; 19 August 2026

🔔 Create Eclipse Foundation Vulnerability Alert

What is CVE-2026-16440?

A vulnerability in Eclipse OpenJ9 versions up to 0.60 arises from the processing of crafted .class files containing deeply nested annotations. This flaw may lead to a segmentation fault, resulting in application crashes and potential disruption in Java environments. Proper validation and neutralization of such inputs are essential to mitigate risks associated with this issue.

Affected Version(s)

Eclipse OpenJ9 0.8.0 < 0.60

References

https://github.com/eclipse-openj9/openj9/security/advisor...

https://github.com/eclipse-openj9/openj9/pull/24572

CVSS V4

Score:

5.7

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

Physical

Privileges Required:

Undefined

User Interaction:

Unknown

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 19, 2026
Vulnerability Reserved
Jul 21, 2026

Credit

Sebastian Josue Alba Vives

CVE-2026-16440 Data

JSON