CVE-2026-16439

CriticalCVSS 9.1

Published: 21/07/2026(UTC)Updated: 11/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

11th percentile - higher than 11% of all known CVEs

Vulnerability in Eclipse OpenJ9 up to version 0.60. Using -Xtrace to trace method arguments can lead to buffer underflow.

Risk of application crash or potential code execution in Java environment.

Upgrade Eclipse OpenJ9 to version above 0.60 or avoid using -Xtrace with method arguments.

Original NVD description (English source)

In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow.