CVE-2022-3676: Eclipse OPENJ9

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.

Affected products

• Eclipse OPENJ9: before 0.35.0 (fixed in 0.35.0)

Published 2022-10-24. Last modified 2026-06-17.