Out-of-bounds Read in Eclipse Foundation Omr

CVE-2026-16243

In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes to compare is zero.

Vulnerability class: Buffer Overflow

Affected products

Weakness classification (CWE)

References