EIP-2026-119011

This advisory describes a signed integer overflow vulnerability in Oracle Java's BytePackedRaster.verify() method, which allows bypassing boundary checks and achieving remote code execution. The exploit requires user interaction, such as visiting a malicious page or opening a malicious file.