VDB

GCVE-110-NCSC-2024-419

GCVE-110-NCSC-2024-419
Advisory PublishedCVSS 7.3/10
Vulnetix · Advisory published October 17, 2024
Oracle heeft kwetsbaarheden verholpen in Java SE en GraalVM.

Weaknesses (CWE)

CWE-122Heap-based Buffer OverflowCWE-130Improper Handling of Length Parameter InconsistencyCWE-190Integer Overflow or WraparoundCWE-789Memory Allocation with Excessive Size ValueCWE-195Signed to Unsigned Conversion ErrorCWE-416Use After FreeCWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')

Risk Scores

CVSS 3.1
7.3/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected Products

VendorProductVersionsPlatforms
oracle_corporationoracle_java_se
oraclegraalvm
oracle_corporationgraalvm
oraclejava_se
oraclegraalvm_for_jdk
oracledatabase_server

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

73,280 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›