CVE-2025-1471

Katalog CVE

CVSS 7.8 · High EPSS 0,18%

Kerentanan Out-of-bounds Write pada eclipse omr. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS atoe print functions use a constant length buffer for string conversion. If the input format string and arguments are larger than the buffer size then buffer overflow occurs. Beginning in version 0.5.0, the conversion buffers are sized correctly and checked appropriately to prevent buffer overflows.

Rincian

Terbit di NVD

21 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 7,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/eclipse-omr/omr/pull/7658 patch · advisory vendor
• https://gitlab.eclipse.org/security/cve-assignement/-/issues/55 issue tracking · advisory vendor