CVE-2024-21210

A flaw was found in OpenJDK. An integer overflow vulnerability in the HotSpot component during array indexing calculations can cause incorrect data elements to be selected. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to affected application interfaces, potentially leading to unauthorized data modification.

This vulnerability is rated as Moderate severity because exploitation demands complex preconditions to trigger the arithmetic flaw, restricting the blast radius to unauthorized data alteration without impacting confidentiality or service availability. In typical Red Hat enterprise environments, Java workloads process input through managed application frameworks where external parameters rarely manipulate internal array indexing computations directly. An attacker would require specific, reachable interfaces that handle untrusted input in a manner that induces the boundary evaluation error, making broad or automated exploitation unlikely.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.