CVE-2025-1470

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-1470
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1470.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-1470
Published
2025-02-21T10:03:24.829Z
Modified
2026-07-15T01:49:08.027152337Z
Severity
  • 5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
Eclipse OMR: Null pointer dereference vulnerability
Details

In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities consumers of z/OS atoe functions do not check their return values for NULL memory pointers or for memory allocation failures. This can lead to NULL pointer dereference crashes. Beginning in version 0.5.0, internal OMR consumers of atoe functions handle NULL return values and memory allocation failures correctly.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1470.json",
    "cna_assigner": "eclipse",
    "cwe_ids": [
        "CWE-476"
    ]
}
References

Affected packages

Git / github.com/eclipse-omr/omr

Affected ranges

Type
GIT
Repo
https://github.com/eclipse-omr/omr
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6bfb20f781c2cf71ad1b55b2774b58a40bb959ff
Database specific 
{
    "cpe": "cpe:2.3:a:eclipse:omr:*:*:*:*:*:*:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.4.0"
        }
    ]
}

Affected versions

omr-0.*
omr-0.1.0
omr-0.2.0
omr-0.3.0
omr-0.4.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1470.json"