VDB

CVE-2026-16439

CVE-2026-16439 PUBLISHED CVSS 5.8 MEDIUM

Reported by eclipse · Published July 21, 2026

In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow.

Risk Scores

CVSS 4.0
5.8
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:N/VI:H/VA:H/SC:N/SI:L/SA:L

Affected Products

VendorProductVersions
Eclipse FoundationOpenJ90.8.0, 0, 0.60.0
chainguardopenjdk-11-openj90, 0, 0
chainguardopenjdk-8-openj90, 0, 0
chainguardopenjdk-17-openj90, 0, 0
chainguardopenjdk-26-openj90, 0, 0
chainguardopenjdk-25-openj90, 0, 0
chainguardopenjdk-21-openj90, 0, 0
Eclipse FoundationOpenJ90.8.0, 0, 0.60.0

Timeline

  • Jul 21, 2026 CVE Published
  • Jul 22, 2026 Coalition ESS Score
  • Jul 22, 2026 CVE Updated
  • Aug 1, 2026 Security Advisory
  • Aug 7, 2026 EPSS Score
  • Aug 11, 2026 Distribution Patch
  • Aug 11, 2026 Security Advisory
  • Aug 11, 2026 Distribution Patch
  • Aug 11, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›