CVE-2026-16441
In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.9
- CVSS vector
- CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:N/VI:H/VA:L/SC:L/SI:H/SA:N
- EPSS probability
- 0.28%
- CWE
- CWE-758
- Published
- 2026-07-21
- Last modified
- 2026-07-24
Affected products
- Eclipse Foundation OpenJ9
- Eclipse Foundation OpenJ9
- Eclipse Foundation OpenJ9
Weakness type
Related vulnerabilities
- CVE-2026-50185 — RustCrypto Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are set
- CVE-2024-58350 — Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order
- CVE-2026-40279 — BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()`
- CVE-2026-34549 — iccDEV: UB at IccUtil.cpp
- CVE-2026-34547 — iccDEV: UB at IccUtil.cpp
- CVE-2026-34537 — iccDEV: UB in CIccOpDefEnvVar::Exec()
- CVE-2026-34533 — iccDEV: UB in CIccCalculatorFunc::ApplySequence()
- CVE-2026-28528 — BlueKitchen BTstack < 1.8.1 AVRCP Browsing Target GET_FOLDER_ITEMS Handler OOB Read / Undefined Behavior