AI description
Automated description summarized from trusted sources.
CVE-2026-1188 identifies a buffer overflow vulnerability within the Eclipse OMR port library component, affecting versions released since 0.2.0. The flaw specifically resides in an API function responsible for returning the textual names of supported processor features. This function does not correctly account for the separators inserted between these features when determining the appropriate size for an output buffer. Consequently, if an output buffer supplied to this function is incorrectly sized, failing to factor in the separator characters, a buffer overflow condition can occur. This issue has been addressed and fixed in Eclipse OMR version 0.8.0.
- Description
- In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounting for the separator inserted between processor features. If the output buffer supplied to this function was incorrectly sized, failing to account for the separator when determining when a write to the buffer was safe could lead to a buffer overflow. This issue is fixed in Eclipse OMR version 0.8.0.
- Source
- emo@eclipse.org
- NVD status
- Analyzed
- Products
- omr
CVSS 4.0
- Type
- Secondary
- Base score
- 6.9
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- MEDIUM
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
- Hype score
- Not currently trending
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:eclipse:omr:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6A12DEA6-8CCB-4FD4-B35D-F36499A744ED",
"versionEndExcluding": "0.8.0",
"versionStartIncluding": "0.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]