PT-2025-7510 · Eclipse · Eclipse Omr

Daryl Maier · Published 2025-02-21 · Updated 2025-02-21 · CVE-2025-1470

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Eclipse OMR versions prior to 0.5.0

Description The issue arises from some internal port library and utilities consumers of z/OS atoe functions in Eclipse OMR not checking their return values for NULL memory pointers or memory allocation failures, potentially leading to NULL pointer dereference crashes.

Recommendations For Eclipse OMR versions prior to 0.5.0, update to version 0.5.0 or later to ensure that internal consumers of atoe functions correctly handle NULL return values and memory allocation failures.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-1470

Affected Products

Eclipse Omr

References · 8

• https://github.com/eclipse-omr/omr/pull/7663 · Patch
• https://github.com/eclipse-omr/omr/pull/7655 · Patch
• https://gitlab.eclipse.org/security/cve-assignement/-/issues/54 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1470 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1470 · Vendor Advisory
• https://t.me/cvedetector/18641 · Telegram Post
• https://t.me/cvenotify/111982 · Telegram Post
• https://twitter.com/CVEnew/status/1892885736174604744 · Twitter Post