CVE-2024-3933

Eclipse Open J9 With -Xgc:concurrentScavenge on IBM Z, could write/read outside of a buffer

State: Published
Severity: 5.3 Medium
Published: May 27, 2024
Updated: Aug 1, 2024
Reserved: Apr 17, 2024

Description

In Eclipse OpenJ9 release versions prior to 0.44.0 and after 0.13.0, when running with JVM option -Xgc:concurrentScavenge, the sequence generated for System.arrayCopy on the IBM Z platform with hardware and software support for guarded storage [1], could allow access to a buffer with an incorrect length value when executing an arraycopy sequence while the Concurrent Scavenge Garbage Collection cycle is active and the source and destination memory regions for arraycopy overlap. This allows read and write to addresses beyond the end of the array range.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L	eclipse

Weaknesses

CWE-805 Buffer Access with Incorrect Length Value
CWE-125 Out-of-bounds Read
CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
Open J9Eclipse Foundation	0.13.0 to before 0.44.0Affected

References

https://gitlab.eclipse.org/security/cve-assignement/-/issues/21issue-tracking
https://github.com/eclipse/omr/pull/7275patch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.