PT-2026-5249 · Eclipse · Eclipse Omr

Daryl Maier · Published 2026-01-29 · Updated 2026-05-16 · CVE-2026-1188

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eclipse OMR versions 0.2.0 through 0.7.9

Description An issue exists in the Eclipse OMR port library component where an API function designed to return textual names of supported processor features does not correctly account for separators between these features. If the provided output buffer is incorrectly sized, a buffer overflow can occur. The vulnerable function is the API function to return the textual names of all supported processor features.

Recommendations Update to Eclipse OMR version 0.8.0 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-131

CWE-120

Related Identifiers

CVE-2026-1188

OPENSUSE-SU-2026:10788-1

OPENSUSE-SU-2026:10789-1

OPENSUSE-SU-2026:10790-1

OPENSUSE-SU-2026:10791-1

OPENSUSE-SU-2026:10792-1

SUSE-SU-2026:2036-1

SUSE-SU-2026:2110-1

Affected Products

Eclipse Omr

References · 15

• https://github.com/eclipse-omr/omr/pull/8082 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10791-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1188 · Security Note
• https://osv.dev/vulnerability/CVE-2026-1188 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10788-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10789-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10792-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10790-1 · Vendor Advisory
• https://twitter.com/CVEnew/status/2016805047334735921 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2016829688845406358 · Twitter Post
• https://t.me/CVEtracker/43218 · Telegram Post
• https://suse.com/security/cve/CVE-2026-1188 · Note
• https://t.me/cveNotify/150241 · Telegram Post
• https://t.me/cveNotify/151416 · Telegram Post
• https://twitter.com/knaepp/status/2026355206045237482 · Twitter Post