CVE-2025-30752

EUVD-2025-21527
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler).   The supported version that is affected is Oracle Java SE: 24.0.1; Oracle GraalVM for JDK: 24.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.7 LOW
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
oracleCNA
3.7 LOW
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 11%
Affected Products (NVD)
VendorProductVersion
oraclegraalvm_for_jdk
24.0.1
oraclejdk
24.0.1
oraclejre
24.0.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-8
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
plucky
not-affected
questing
not-affected
xenial
not-affected
openjdk-9
jammy
dne
noble
dne
plucky
dne
questing
dne
xenial
ignored
openjdk-lts
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
plucky
not-affected
questing
not-affected
openjdk-13
focal
ignored
jammy
dne
noble
dne
plucky
dne
questing
dne
openjdk-16
focal
ignored
jammy
dne
noble
dne
plucky
dne
questing
dne
openjdk-17
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
plucky
not-affected
questing
not-affected
openjdk-17-crac
jammy
dne
noble
dne
plucky
not-affected
questing
not-affected
openjdk-18
jammy
ignored
noble
dne
plucky
dne
questing
dne
openjdk-19
jammy
dne
noble
dne
plucky
dne
questing
dne
openjdk-21
focal
not-affected
jammy
not-affected
noble
not-affected
plucky
not-affected
questing
not-affected
openjdk-21-crac
jammy
dne
noble
dne
plucky
not-affected
questing
not-affected
openjdk-24
jammy
dne
noble
dne
plucky
ignored
questing
dne
openjdk-25
jammy
needs-triage
noble
needs-triage
plucky
ignored
questing
needs-triage