CVE-2022-3676

Publication date

2022-10-24 00:00:00

Family

eclipse

State

PUBLISHED

Description

In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.