CVE-2026-16439
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Vulnerability in Eclipse OpenJ9 up to version 0.60. Using -Xtrace to trace method arguments can lead to buffer underflow.
Risk Assessment
Risk of application crash or potential code execution in Java environment.
Recommendation
Upgrade Eclipse OpenJ9 to version above 0.60 or avoid using -Xtrace with method arguments.
Other vulnerabilities in Eclipse OpenJ9
See all- CVE-2026-16441Critical
In Eclipse OpenJ9 up to version 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method.
- CVE-2026-16440Medium
In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault.
Original NVD description (English source)
In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS