NetSight
medium5.3

CVE-2021-41041

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a Meth…

Impact

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles.

Affected products

VendorProductAffected versions
EclipseOpenj9
before 0.32.0
OracleJava Se
Versions 8, 11

Weakness classification

References