CVE-2025-1471

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-1471

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1471.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-1471

Published

2025-02-21T10:07:22.507Z

Modified

2026-07-15T01:49:05.602292360Z

Severity

7.1 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

Eclipse OMR: Buffer overflow vulnerability

Details

In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS atoe print functions use a constant length buffer for string conversion. If the input format string and arguments are larger than the buffer size then buffer overflow occurs. Beginning in version 0.5.0, the conversion buffers are sized correctly and checked appropriately to prevent buffer overflows.

Database specific

{
    "cwe_ids": [
        "CWE-787"
    ],
    "cna_assigner": "eclipse",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1471.json"
}

References

Affected packages

Git / github.com/eclipse-omr/omr

Affected ranges

Type

GIT

Repo

https://github.com/eclipse-omr/omr

Events

Introduced

b5ef5eda4680b6b5cf0c2f954362f9f47353ce04

Fixed

6bfb20f781c2cf71ad1b55b2774b58a40bb959ff

Database specific

{
    "extracted_events": [
        {
            "introduced": "0.2.0"
        },
        {
            "fixed": "0.4.0"
        },
        {
            "last_affected": "0.4.0"
        }
    ],
    "cpe": "cpe:2.3:a:eclipse:omr:*:*:*:*:*:*:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

omr-0.*

omr-0.2.0

omr-0.3.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1471.json"