CVE-2025-1470: Eclipse OMR: Null pointer dereference vulnerability
In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities consumers of z/OS atoe functions do not check their return values for NULL memory pointers or for memory allocation failures. This can lead to NULL pointer dereference crashes. Beginning in version 0.5.0, internal OMR consumers of atoe functions handle NULL return values and memory allocation failures correctly.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1470?
CVE-2025-1470 is considered a moderate severity vulnerability due to the potential for NULL pointer dereference crashes.
How do I fix CVE-2025-1470?
To fix CVE-2025-1470, update Eclipse OMR to version 0.4.0 or later, which includes necessary checks for NULL pointers.
What are the affected versions of Eclipse OMR for CVE-2025-1470?
Versions of Eclipse OMR from the initial contribution up to and including 0.4.0 are affected by CVE-2025-1470.
What type of vulnerabilities does CVE-2025-1470 represent?
CVE-2025-1470 represents a vulnerability related to improper validation of memory allocation, leading to NULL pointer dereferences.
Where can I find more information about CVE-2025-1470?
More information on CVE-2025-1470 can be found in the Eclipse OMR GitHub repository issues and pull requests.