EIP-2026-102331
PRE-CVEOracle Java Runtime Environment - Heap Out-of-Bounds Read During TTF Font Rendering in AlternateSubstitutionSubtable::process
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-102331. PoCs published by Google Security Research.
AI-analyzed exploit summary This report details a heap-based out-of-bounds read vulnerability in Oracle Java Runtime Environment 8u202, triggered during TrueType font processing in the `AlternateSubstitutionSubtable::process` function. The crash occurs due to invalid memory access, with technical analysis including stack traces and register states from both Linux and Windows environments.
Description
Oracle Java Runtime Environment - Heap Out-of-Bounds Read During TTF Font Rendering in AlternateSubstitutionSubtable::process
Exploits (1)
This report details a heap-based out-of-bounds read vulnerability in Oracle Java Runtime Environment 8u202, triggered during TrueType font processing in the `AlternateSubstitutionSubtable::process` function. The crash occurs due to invalid memory access, with technical analysis including stack traces and register states from both Linux and Windows environments.