CVE-2022-3676
Assigner: eclipse
Published: 2022-10-24T00:00:00
State: PUBLISHED
descriptions: value: In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.
affected: vendor: The Eclipse Foundation
product: Eclipse OpenJ9
versions: version: unspecified
lessThan: 0.35.0
status: affected
versionType: custom
problemTypes: descriptions: type: CWE
description: CWE-20: Improper Input Validation
cweId: CWE-20
descriptions: type: CWE
description: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
cweId: CWE-843