CVE-2026-16440
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault.
Risk Assessment
The risk includes crashes of Java applications running on OpenJ9, which can lead to service disruption and potential data loss.
Recommendation
Update Eclipse OpenJ9 to a version newer than 0.60 that includes the fix. Avoid running untrusted .class files.
Other vulnerabilities in Eclipse OpenJ9
See all- CVE-2026-16441Critical
In Eclipse OpenJ9 up to version 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method.
- CVE-2026-16439Critical
Vulnerability in Eclipse OpenJ9 up to version 0.60. Using -Xtrace to trace method arguments can lead to buffer underflow.
Original NVD description (English source)
In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS