What is CVE-2026-1188?

CVE-2026-1188 is a critical-severity vulnerability in Eclipse Omr, classified under Incorrect Calculation of Buffer Size. CVSS score: 9.8/10. Published 2026-01-29.

How severe is CVE-2026-1188?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Buffer overflow in Eclipse Omr

CVE-2026-1188

In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounting for the separator inserted between processor features. If the output buffer s…

EPSS: 0.005 (38.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Eclipse Omr
Eclipse Foundation Omr — versions 0.2.0

Weakness classification (CWE)

CWE-131 — Incorrect Calculation of Buffer Size
CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

emo@eclipse.org (Patch, Issue Tracking)

Frequently asked questions

What is CVE-2026-1188?: CVE-2026-1188 is a critical-severity vulnerability in Eclipse Omr, classified under Incorrect Calculation of Buffer Size. CVSS score: 9.8/10. Published 2026-01-29.
How severe is CVE-2026-1188?: Critical severity. CVSS v3 base score is 9.8 out of 10.