REDHAT-BUG-2359693: Medium severity Oracle Java SE vulnerability

Published Apr 15, 2025

Updated

The Graphics.copyArea operation with extreme values can trigger a heap corruption scenario.

Affected Software

1 affected component

Oracle Java SE

Event History

Apr 15, 2025

Data Sourced

via Red Hat·07:41 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What capability would an attacker need to influence to trigger this issue?

The triggering condition involves supplying extreme values to the Graphics.copyArea operation. The available information does not state whether those values can be reached through remote input or which application workflows expose the operation.

Which Java code lines have fix references available?

The supplied references point to fixes in the OpenJDK JDK 8u, JDK 11u, and JDK 17u code lines. No fixed release version numbers are provided.

Is there a documented workaround for environments that cannot patch immediately?

No workaround or configuration-based mitigation is provided in the available data. It also does not state whether default configurations are affected.

REDHAT-BUG-2359693: Medium severity Oracle Java SE vulnerability

Affected Software

Event History

Frequently Asked Questions

What capability would an attacker need to influence to trigger this issue?

Which Java code lines have fix references available?

Is there a documented workaround for environments that cannot patch immediately?

Company

Resources

Contact

Frequently Asked Questions

What capability would an attacker need to influence to trigger this issue?

Which Java code lines have fix references available?

Is there a documented workaround for environments that cannot patch immediately?