Eclipse Foundation Eclipse OMR

4 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-162430.1 – < 0.11Eclipse OMR : arraycmp SIMD implementation does not check if the number of bytes to compare is zeroMEDIUM 5.70.5 %
CVE-2026-11880.2.0 – < 0.8.0In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor featurMEDIUM 6.90.5 %
CVE-2025-14710.2.0 – < 0.4.0Eclipse OMR: Buffer overflow vulnerabilityHIGH 7.10.2 %
CVE-2025-1470≤ 0.4.0Eclipse OMR: Null pointer dereference vulnerabilityMEDIUM 5.10.2 %