Live › vulnerability › CVE-2026-111075
Go to dashboardEclipse OpenJ9 before 0.63.0 fails to validate size fields in JITServer DataDescriptor messages, causing an unsigned underflow. An unauthenticated remote attacker can send a crafted payload that triggers an out-of-bounds heap read and a SIGSEGV crash, a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check whether the JVM runs with JITServer enabled, for example by looking for -XX:+JITServer or -XX:+UseJITServer in the process command line.
0.63.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled _size, _paddingSize, and _dataOffset fields during DataDescriptor message deserialization. An unauthenticated remote attacker can send a crafted network payload that triggers an unsigned integer underflow in DataDescriptor::getPayloadSize() and DataDescriptor::getNextDescriptor(). This results in an out-of-bounds heap read and an immediate process crash (SIGSEGV), causing a denial of service.
This page as .md · .json · in your agent: get_signal("CVE-2026-111075")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.