How severe is CVE-2019-17639?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5.3 out of 10.

What type of vulnerability is CVE-2019-17639?

This is classified as CWE-843, which is a common weakness in software security.

CVE-2019-17639 - MEDIUM Severity | CVSS 5.3

Vulnerability Description

In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.

Related Vulnerabilities

CVE-2019-13118

MEDIUM

CVSS:5.3(Medium)

In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, l...

CWE-8432019

CVE-2021-31344

MEDIUM

CVSS:5.3(Medium)

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNE...

CWE-8432021

CVE-2023-34967

MEDIUM

CVSS:5.3(Medium)

A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the ke...

CWE-8432023

CVE-2023-44094

MEDIUM

CVSS:5.3(Medium)

Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.

CWE-8432023

CVE-2024-13275

MEDIUM

CVSS:5.3(Medium)

Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Drupal Security Kit allows HTTP DoS.This issue affects Security Kit: from 0.0.0 before 2.0.3.

CWE-8432024

CVE-2019-8251

MEDIUM

CVSS:5.5(Medium)

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and ear...

CWE-8432019