{"schemaVersion":3,"id":"CVE-2019-10245","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.","dates":{"published":"2019-04-19T13:43:31.000Z","modified":"2024-08-04T22:17:19.773Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02492,"percentile":0.84424,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.02492},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02492,"percentile":0.84424}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02492,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02492,"percentile":0.84424}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"},{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"eclipse","product":"openj9","name":"openj9","label":"openj9","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 0.14.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14.0","eol":null,"hubHref":"/vendor/eclipse/openj9"},{"vendor":"redhat","product":"enterprise_linux","name":"enterprise linux","label":"enterprise_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"8.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.0","eol":{"isEol":false,"eolDate":"2029-05-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"8","label":"8 (Upcoming ELS)","eolFrom":"2029-05-31T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"8.10"},"product":{"name":"rhel","label":"Red Hat Enterprise Linux","category":"os"}},"hubHref":"/vendor/redhat/enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop","name":"enterprise linux desktop","label":"enterprise_linux_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server","name":"enterprise linux server","label":"enterprise_linux_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation","name":"enterprise linux workstation","label":"enterprise_linux_workstation","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_workstation"},{"vendor":"redhat","product":"satellite","name":"satellite","label":"satellite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.8","eol":null,"hubHref":"/vendor/redhat/satellite"},{"vendor":"the eclipse foundation","product":"eclipse openj9","name":"Eclipse OpenJ9","label":"eclipse openj9","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 0.14.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 0.14.0","eol":null,"hubHref":"/vendor/the_eclipse_foundation/eclipse_openj9"}],"affectedCount":7,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://bugs.eclipse.org/bugs/show_bug.cgi?id=545588","label":"bugs.eclipse.org/bugs/show_bug.cgi?id=545588","hostname":"bugs.eclipse.org","tags":["X Refsource CONFIRM","Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/108094","label":"www.securityfocus.com/bid/108094","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1164","label":"access.redhat.com/errata/RHSA-2019:1164","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1163","label":"access.redhat.com/errata/RHSA-2019:1163","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1165","label":"access.redhat.com/errata/RHSA-2019:1165","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1166","label":"access.redhat.com/errata/RHSA-2019:1166","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1238","label":"access.redhat.com/errata/RHSA-2019:1238","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1325","label":"access.redhat.com/errata/RHSA-2019:1325","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":["RHSA-2019:1163","RHSA-2019:1164","RHSA-2019:1165","RHSA-2019:1166","RHSA-2019:1238","RHSA-2019:1325","SUSE-SU-2019:1308-1","SUSE-SU-2019:1308-2","SUSE-SU-2019:1345-1","SUSE-SU-2019:14059-1","SUSE-SU-2019:1644-1"],"duplicates":[],"related":["SUSE-SU-2019:1308-1","SUSE-SU-2019:1308-2","SUSE-SU-2019:1345-1","SUSE-SU-2019:14059-1","SUSE-SU-2019:1644-1"]},"timeline":[{"kind":"published","date":"2019-04-19T13:43:31.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-04T22:17:19.773Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T20:57:00.322Z","stale":false,"partial":false}}