CVE-2024-21147

OpenJDK: RangeCheckElimination array index overflow (8323231)

Loading…

Severity

Important

Red Hat Product Security

7.4

CVSS 3.1

Review impact separately from score.

Published · July 17, 2024

Updated · September 16, 2026

Description

A vulnerability in Oracle Java SE and GraalVM (Hotspot component) affects multiple versions, allowing an unauthenticated attacker with network access to modify or access critical data. Exploitation is difficult but possible via APIs, such as web services supplying data. It also impacts Java deployments running untrusted code in a sandbox.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE not specified