Eclipse OMR Buffer Overflow Vulnerability in Port Library Component

A buffer overflow vulnerability has been identified in the Eclipse OMR port library component, affecting versions since release 0.2.0. The issue arises in an API function that returns the textual names of supported processor features. The function failed to properly account for the separator between features, leading to a potential buffer overflow if the output buffer was incorrectly sized. This vulnerability has been addressed in Eclipse OMR version 0.8.0.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, a common vulnerability that can be exploited to execute arbitrary code or cause a crash.

Remediation

Users can upgrade to Eclipse OMR version 0.8.0 to address this vulnerability.