Heap-based Buffer Overflow Affecting openjdk-jre package, versions [,1.8.0_452)[9.0.0,11.0.27)[12.0.0,17.0.15)[18.0.0,21.0.7)[22.0.0,24.0.1)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-UPSTREAM-OPENJDKJRE-9728202
- published17 Apr 2025
- disclosed15 Apr 2025
- creditUnknown
Introduced: 15 Apr 2025
NewCVE-2025-30698 (opens in a new tab)Common Vulnerabilities and Exposures (CVE) are common identifiers for publicly known security vulnerabilities
Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade openjdk-jre to version 8.0.452, 11.0.27, 17.0.15, 21.0.7, 24.0.1 or higher.
Overview
openjdk-jre is a free and open-source implementation of the Java Platform, Standard Edition (Java SE).
Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the Graphics.copyArea functionality in client-libs/2d. An attacker can manipulate memory and potentially execute code.