CVE-2025-30752

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler).   The supported version that is affected is Oracle Java SE: 24.0.1; Oracle GraalVM for JDK: 24.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
3.7 LOW
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
oracleCNA
3.7 LOW
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
VendorProductVersion
oraclegraalvm_for_jdk
24.0.1
oraclejdk
24.0.1
oraclejre
24.0.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-8
plucky
not-affected
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
not-affected
openjdk-9
plucky
dne
noble
dne
jammy
dne
xenial
ignored
openjdk-lts
plucky
not-affected
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
openjdk-13
plucky
dne
noble
dne
jammy
dne
focal
ignored
openjdk-16
plucky
dne
noble
dne
jammy
dne
focal
ignored
openjdk-17
plucky
not-affected
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
openjdk-17-crac
plucky
not-affected
noble
dne
jammy
dne
openjdk-18
plucky
dne
noble
dne
jammy
ignored
openjdk-19
plucky
dne
noble
dne
jammy
ignored
openjdk-21
plucky
not-affected
noble
not-affected
jammy
not-affected
focal
not-affected
openjdk-21-crac
plucky
not-affected
noble
dne
jammy
dne
openjdk-24
plucky
needs-triage
noble
dne
jammy
dne
openjdk-25
plucky
needs-triage
noble
dne
jammy
dne