REDHAT-BUG-1761146: Low severity openjdk vulnerability

Published Oct 12, 2019

Updated

It was discovered that the CMap class in the 2D component in OpenJDK did not check if TrueType font files could contain character map tables of declared size before performing memory allocation. A specially crafted font file could use this flaw to cause a Java application to use an excessive amount of memory and possibly unexpectedly exist due to an out of memory condition.

Affected Software

1 affected component

OpenJDK OpenJDK

Event History

Oct 12, 2019

Data Sourced

via Red Hat·09:27 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1761146?

The severity of REDHAT-BUG-1761146 is considered high due to its potential to allow excessive memory allocation.

How do I fix REDHAT-BUG-1761146?

To fix REDHAT-BUG-1761146, you should apply the latest security patches released for OpenJDK.

What systems are affected by REDHAT-BUG-1761146?

REDHAT-BUG-1761146 affects systems running vulnerable versions of OpenJDK.

What is the cause of REDHAT-BUG-1761146?

The cause of REDHAT-BUG-1761146 is a failure in the CMap class to properly validate the size of character map tables in TrueType font files.

What could happen if REDHAT-BUG-1761146 is exploited?

If exploited, REDHAT-BUG-1761146 could lead to excessive memory consumption, potentially crashing Java applications.