OMR on Z processors Exposing a possible buffer over-read problem
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- Low · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
In the Eclipse OMR compiler component, since release 0.7.0, an optimization enabled for Eclipse OpenJ9 consumers of OMR on Z processors incorrectly handles NUL (0x00) characters during the Latin-compatible charset (UTF-8, ISO8859-1, ASCII, etc) to IBM-1047/037 translation sequence. This can cause the output byte array to be truncated, discarding the first NUL byte and all subsequent characters, and thereby exposing a possible buffer over-read problem. This issue is fixed in Eclipse OMR version 0.8.0.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Eclipse OMR | Eclipse OMR | 0.7.0 | — | No fix listed | CNA |
- Eclipse OMR VendorEclipse OMR Affected 0.7.0 Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:eclipse:omr:0.7.0:*:*:*:*:*:*:* | 0.7.0 | Vulnerable | Eclipse Foundation |
- cpe:2.3:a:eclipse:omr:0.7.0:*:*:*:*:*:*:* Versions 0.7.0 Vulnerable ·Eclipse Foundation
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-14549
- 2026-10-03 Alias added: GHSA-rw8m-hvvr-gqpp
References
More Eclipse Foundation Omr vulnerabilities
- TI-2026-00915 Buffer overflow in Eclipse OMR CVSS 4.0MEDIUM 6.9
- TI-2019-08831 Time-of-check time-of-use race condition in Eclipse OMR CVSS 3.1HIGH 7.4
- TI-2019-08830 Access control flaw in Eclipse OMR CVSS 3.1HIGH 7.8
- TI-2025-01264 Eclipse OMR: Buffer overflow vulnerability CVSS 4.0HIGH 7.1
- TI-2026-13582 Eclipse OMR : arraycmp SIMD implementation does not check if the number of bytes to compare is zero CVSS 4.0MEDIUM 5.7
- TI-2025-01263 Eclipse OMR: Null pointer dereference vulnerability CVSS 4.0MEDIUM 5.1
Sources
- CVE-2025-14549 · CVE Program
- CVE-2025-14549 · NVD
- FIRST EPSS
- GHSA-rw8m-hvvr-gqpp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences