CVE-2025-14549 | THREATINT

Description

In the Eclipse OMR compiler component, since release 0.7.0, an optimization enabled for Eclipse OpenJ9 consumers of OMR on Z processors incorrectly handles NUL (0x00) characters during the Latin-compatible charset (UTF-8, ISO8859-1, ASCII, etc) to IBM-1047/037 translation sequence. This can cause the output byte array to be truncated, discarding the first NUL byte and all subsequent characters, and thereby exposing a possible buffer over-read problem. This issue is fixed in Eclipse OMR version 0.8.0.

PUBLISHED Reserved 2025-12-11 | Published 2025-12-15 | Updated 2025-12-15 | Assigner eclipse

MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L

Problem types

CWE-125 Out-of-bounds Read

Product status

Default status

unaffected

0.7.0 (semver)

affected

References

github.com/eclipse-omr/omr/pull/8073

cve.org (CVE-2025-14549)

nvd.nist.gov (CVE-2025-14549)

Download JSON