Eclipse OMR NULL Pointer Dereference Vulnerability in z/OS Atoe Function Consumers

A NULL pointer dereference vulnerability has been identified in Eclipse OMR, affecting versions from the initial contribution to 0.4.0. This issue arises in some internal port library and utilities that consume z/OS atoe functions, which do not properly check for NULL return values or memory allocation failures. As a result, these oversights can lead to crashes due to NULL pointer dereferences. However, starting from version 0.5.0, OMR's internal consumers of atoe functions have been updated to correctly handle NULL return values and memory allocation errors.

Impact

Exploitation of this vulnerability causes crashes by dereferencing NULL pointers, leading to application instability.