CVE-2026-1188: Buffer Overflow
In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounting for the separator inserted between processor features. If the output buffer supplied to this function was incorrectly sized, failing to account for the separator when determining when a write to the buffer was safe could lead to a buffer overflow. This issue is fixed in Eclipse OMR version 0.8.0.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1188?
CVE-2026-1188 is classified as a medium severity vulnerability.
How do I fix CVE-2026-1188?
To fix CVE-2026-1188, ensure that the output buffer supplied to the API function is correctly sized to accommodate the separator between processor features.
What versions of Eclipse OMR are affected by CVE-2026-1188?
Eclipse OMR versions from 0.2.0 to 0.8.0 are affected by CVE-2026-1188.
What component is impacted by CVE-2026-1188?
CVE-2026-1188 impacts the API function in the Eclipse OMR port library component.
What kind of vulnerability is CVE-2026-1188?
CVE-2026-1188 is a buffer overflow vulnerability that can occur if the output buffer size is insufficient.