CVE-2026-16243

EUVD-2026-46347
In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes to compare is zero.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 29.42%
Affected Products (NVD)
VendorProductVersion
eclipseomr
0.1.0 ≤
𝑥
≤ 0.10.0
𝑥
= Vulnerable software versions
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
java-1.8.0-ibm
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed
java-1.8.0-ibm-demo
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed
java-1.8.0-ibm-devel
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed
java-1.8.0-ibm-headless
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed
java-1.8.0-ibm-jdbc
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed
java-1.8.0-ibm-plugin
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed
java-1.8.0-ibm-src
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed
java-1.8.0-ibm-webstart
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed