{"id":"CVE-2024-10917","state":"PUBLISHED","title":"Eclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength","description":"In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.","publishedAt":"2024-11-11T16:55:11.393Z","updatedAt":"2024-11-12T20:14:21.838Z","severity":{"score":3.7,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","source":"eclipse"},"assigner":"eclipse","products":["Eclipse Foundation Open J9"],"affected":[{"vendor":"Eclipse Foundation","product":"Open J9","defaultStatus":"unaffected","versions":[{"version":"0.8.0","status":"affected","lessThanOrEqual":"0.47.0","versionType":"semver"}],"repo":"https://github.com/eclipse-openj9/openj9"}],"references":["https://gitlab.eclipse.org/security/cve-assignement/-/issues/47","https://github.com/eclipse-openj9/openj9/pull/20362","https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.48.0"],"weaknesses":["CWE-190"],"ingestedAt":"2026-10-29T20:06:50.777Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/10xxx/CVE-2024-10917.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-10917","state":"PUBLISHED","datePublished":"2024-11-11T16:55:11.393Z","dateUpdated":"2024-11-12T20:14:21.838Z","assignerShortName":"eclipse","assignerOrgId":"e51fbebd-6053-4e49-959f-1b94eeb69a2c","dateReserved":"2024-11-06T09:21:23.318Z"},"containers":{"cna":{"title":"Eclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength","descriptions":[{"lang":"en","value":"In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters."}],"affected":[{"vendor":"Eclipse Foundation","product":"Open J9","defaultStatus":"unaffected","versions":[{"version":"0.8.0","status":"affected","lessThanOrEqual":"0.47.0","versionType":"semver"}],"repo":"https://github.com/eclipse-openj9/openj9"}],"references":[{"url":"https://gitlab.eclipse.org/security/cve-assignement/-/issues/47"},{"url":"https://github.com/eclipse-openj9/openj9/pull/20362"},{"url":"https://github.com/eclipse-openj9/openj9/releases/tag/openj9-0.48.0"}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"eclipse","orgId":"e51fbebd-6053-4e49-959f-1b94eeb69a2c","dateUpdated":"2024-11-11T16:55:11.393Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-11-12T15:44:26.956117Z","id":"CVE-2024-10917","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-11-12T20:14:21.838Z"}}]}}}