CVE-2026-111075 | Eclipse OpenJ9 up to 0.62 JITServer getNextDescriptor _size/_paddingSize/_dataOffset integer underflow

October 21, 2026 Yanac

A vulnerability described as critical has been identified in Eclipse OpenJ9 up to 0.62. This vulnerability affects the function DataDescriptor::getPayloadSize/DataDescriptor::getNextDescriptor of the component JITServer. Executing a manipulation of the argument _size/_paddingSize/_dataOffset can lead to integer underflow.

This vulnerability is tracked as CVE-2026-111075. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More