CVE-2026-111074
— UNSCOREDpublic exploit availablePublished 2026-10-21 · Updated 2026-10-26
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial of service. When processing the initial 4-byte length field of an incoming TCP connection, an integer overflow in `MessageBuffer::computeRequiredCapacity()` causes the receiving compilation worker thread to enter an infinite loop consuming ~100% CPU. An unauthenticated remote attacker can exploit this by opening a small number of crafted TCP connections to exhaust the entire worker thread pool, silently halting compilation services for all connected client JVMs.
Weaknesses
CWE-190, CWE-835
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-107348
- HIGHCVE-2026-6668
- MEDIUMCVE-2016-20099PoC
- MEDIUMCVE-2025-14181PoC
- UNSCOREDCVE-2025-58771
- HIGHCVE-2026-100136
- HIGHCVE-2026-100208
- UNSCOREDCVE-2026-101201
Related by shared AI tags and CWE weakness class. Browse the full archive.