CVE-2018-12548 - AskarLabs CVE Database

CVE-2018-12548

Vendor The Eclipse Foundation

Product Eclipse OpenJ9

Weakness CWE-822

Published January 31, 2019

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer values that are dereferenced in the native code.

Key dates

02Disclosure timeline

January 31, 2019 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-12548 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/822.html

Related vulnerabilities

04Related CVE

CVE-2025-32446 CVE-2025-4993 Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. CVE-2024-43646 Windows Secure Kernel Mode Elevation of Privilege Vulnerability CVE-2021-22649 CVE-2024-43631 Windows Secure Kernel Mode Elevation of Privilege Vulnerability