CVE-2024-10917
Low
Eclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength
In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.
Exploit probability
0.4%
Published
November 11, 2024
Required by
Not available
Last source change
August 12, 2026
02 / AFFECTED SOFTWARE
Affected packages
26 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
CVE-2024-10917
View original source
In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.
05 / REFERENCES
Further evidence
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/10xxx/CVE-2024-10917.json
- https://github.com/eclipse-openj9/openj9
- https://github.com/eclipse-openj9/openj9/pull/20362
- https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.48.0
- https://gitlab.eclipse.org/security/cve-assignement/-/issues/47
- https://nvd.nist.gov/vuln/detail/CVE-2024-10917