CVE-2022-3676
In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlini...
Original description
The description as published by the source.
In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- report gitlab.eclipse.org