CVE-2026-1188

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2026-01-29

Last updated on: 2026-02-09

Assigner: Eclipse Foundation

Description

In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounting for the separator inserted between processor features. If the output buffer supplied to this function was incorrectly sized, failing to account for the separator when determining when a write to the buffer was safe could lead to a buffer overflow. This issue is fixed in Eclipse OMR version 0.8.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-29

Last Modified

2026-02-09

Generated

2026-07-06

AI Q&A

2026-01-29

EPSS Evaluated

2026-07-05

NVD

CVE-2026-1188

EUVD

EUVD-2026-4991

Affected Vendors & Products

Vendor	Product	Version / Range
eclipse	omr	From 0.2 (inc) to 0.8.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-131	The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This vulnerability occurs in the Eclipse OMR port library component where an API function that returns the textual names of all supported processor features does not properly account for the separator inserted between processor features. If the output buffer provided to this function is incorrectly sized by not including space for the separator, it can lead to a buffer overflow when writing to the buffer. [1]

Impact Analysis

The vulnerability can lead to a buffer overflow, which may cause unexpected behavior such as crashes or potential exploitation by attackers to execute arbitrary code or cause denial of service. This impacts the stability and security of systems using the affected Eclipse OMR versions prior to 0.8.0. [1]

Mitigation Strategies

Update Eclipse OMR to version 0.8.0 or later, which includes the fix for this buffer overflow issue in the processor feature string function. The fix ensures sufficient space is allocated for separator characters, preventing buffer overflows. [1]

Hi! I’m here to help you understand CVE-2026-1188. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70