Unrated severityNVD Advisory· Published Oct 24, 2022· Updated May 7, 2025

CVE-2022-3676

Description

In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.

Affected products

osv-coords38 versions
pkg:rpm/opensuse/java-11-openj9&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/java-11-openj9&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/java-17-openj9&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/java-17-openj9&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/java-1_8_0-ibm&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/java-1_8_0-openj9&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/java-1_8_0-openj9&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/java-1_8_0-openj9&distro=openSUSE%20Tumbleweed pkg:rpm/suse/java-11-openj9&distro=SUSE%20Package%20Hub%2015%20SP6 pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/java-17-openj9&distro=SUSE%20Package%20Hub%2015%20SP6 pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP4 pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 11.0.26.0-bp156.4.3.1+ 37 more
- (no CPE)range: < 11.0.26.0-bp156.4.3.1
- (no CPE)range: < 11.0.17.0-1.1
- (no CPE)range: < 17.0.14.0-bp156.3.3.1
- (no CPE)range: < 17.0.5.0-1.1
- (no CPE)range: < 1.8.0_sr7.20-150000.3.68.1
- (no CPE)range: < 1.8.0.352-150200.3.27.1
- (no CPE)range: < 1.8.0.352-150200.3.27.1
- (no CPE)range: < 1.8.0.352-1.1
- (no CPE)range: < 11.0.26.0-bp156.4.3.1
- (no CPE)range: < 1.7.1_sr5.15-38.77.1
- (no CPE)range: < 1.7.1_sr5.15-38.77.1
- (no CPE)range: < 1.7.1_sr5.15-38.77.1
- (no CPE)range: < 1.7.1_sr5.15-38.77.1
- (no CPE)range: < 1.7.1_sr5.15-38.77.1
- (no CPE)range: < 1.7.1_sr5.15-38.77.1
- (no CPE)range: < 1.7.1_sr5.15-38.77.1
- (no CPE)range: < 1.7.1_sr5.15-38.77.1
- (no CPE)range: < 17.0.14.0-bp156.3.3.1
- (no CPE)range: < 1.8.0_sr7.20-150000.3.68.1
- (no CPE)range: < 1.8.0_sr7.20-150000.3.68.1
- (no CPE)range: < 1.8.0_sr7.20-150000.3.68.1
- (no CPE)range: < 1.8.0_sr7.20-150000.3.68.1
- (no CPE)range: < 1.8.0_sr7.20-150000.3.68.1
- (no CPE)range: < 1.8.0_sr7.20-150000.3.68.1
- (no CPE)range: < 1.8.0_sr7.20-30.102.1
- (no CPE)range: < 1.8.0_sr7.20-30.102.1
- (no CPE)range: < 1.8.0_sr7.20-30.102.1
- (no CPE)range: < 1.8.0_sr7.20-150000.3.68.1
- (no CPE)range: < 1.8.0_sr7.20-150000.3.68.1
- (no CPE)range: < 1.8.0_sr7.20-150000.3.68.1
- (no CPE)range: < 1.8.0_sr7.20-30.102.1
- (no CPE)range: < 1.8.0_sr7.20-30.102.1
- (no CPE)range: < 1.8.0_sr7.20-150000.3.68.1
- (no CPE)range: < 1.8.0_sr7.20-150000.3.68.1
- (no CPE)range: < 1.8.0_sr7.20-150000.3.68.1
- (no CPE)range: < 1.8.0_sr7.20-30.102.1
- (no CPE)range: < 1.8.0_sr7.20-30.102.1
- (no CPE)range: < 1.8.0_sr7.20-30.102.1
The Eclipse Foundation/Eclipse OpenJ9v5
Range: unspecified

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000