CVE-2021-41035

    Dashboard / Vulnerabilities / CVE-2021-41035

    CVE-2021-41035

    Published: 25 Oct 2021Last Modified: 3 Sept 2026

    Summary:

    Details: In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods.

    References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=576395, https://gitlab.eclipse.org/eclipsefdn/emo-team/emo/-/issues/104, https://security.netapp.com/advisory/ntap-20240621-0006/, https://github.com/eclipse-openj9/openj9/pull/13740

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -e1e72c497688c765183573526f7418a6fe891e93

    Affected versions

    openj9-0.29.0-m2a
    openj9-0.29.0-m2
    openj9-0.29.0-m1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-41035 | CVE-DB