Vulnerability Description
In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS atoe print functions use a constant length buffer for string conversion. If the input format string and arguments are larger than the buffer size then buffer overflow occurs. Beginning in version 0.5.0, the conversion buffers are sized correctly and checked appropriately to prevent buffer overflows.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Eclipse | Omr | >= 0.2.0, <= 0.4.0 |
Related Weaknesses (CWE)
References
- https://github.com/eclipse-omr/omr/pull/7658PatchVendor Advisory
- https://gitlab.eclipse.org/security/cve-assignement/-/issues/55Issue TrackingVendor Advisory
FAQ
What is CVE-2025-1471?
CVE-2025-1471 is a vulnerability with a CVSS score of 7.8 (HIGH). In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS atoe print functions use a constant length buffer for string conversion. If the input format string and arguments are larger than the buffer si...
How severe is CVE-2025-1471?
CVE-2025-1471 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-1471?
Check the references section above for vendor advisories and patch information. Affected products include: Eclipse Omr.