PT-2025-20595 · Oracle+4 · Openjdk+4

Published 2025-05-09 · Updated 2025-09-05 · CVE-2025-4447

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 versions up to 0.51

Description A stack-based buffer overflow can occur when Eclipse OpenJ9 is used with OpenJDK version 8, by modifying a file on disk that is read when the JVM starts.

Recommendations For Eclipse OpenJ9 versions up to 0.51, update to a version later than 0.51 to resolve the issue. As a temporary workaround, consider restricting access to files on disk that are read by the JVM at startup to minimize the risk of exploitation.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CESA-2025_8431

CVE-2025-4447

OPENSUSE-SU-2025:15231-1

OPENSUSE-SU-2025_01788-1

RHSA-2025:8431

RHSA-2025_8431

SUSE-SU-2025:01770-1

SUSE-SU-2025:01788-1

SUSE-SU-2025:01954-1

SUSE-SU-2025_01770-1

SUSE-SU-2025_01788-1

Affected Products

Centos

Eclipse Openj9

Openjdk

Red Hat

Suse

References · 27

• https://osv.dev/vulnerability/SUSE-SU-2025:01770-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01788-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-4447 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01954-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4447 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15231-1 · Vendor Advisory
• https://gitlab.eclipse.org/security/cve-assignement/-/issues/61 · Vendor Advisory
• https://github.com/eclipse-openj9/openj9/pull/21762 · Note
• https://bugzilla.suse.com/1242208 · Note
• https://t.me/cvetracker/23516 · Telegram Post
• https://suse.com/security/cve/CVE-2025-30698 · Note
• https://t.me/cveNotify/134433 · Telegram Post
• https://bugzilla.suse.com/1241274 · Note
• https://suse.com/security/cve/CVE-2025-21587 · Note
• https://bugzilla.suse.com/1241276 · Note