Vulnerability Details CVE-2026-16243
In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes to compare is zero.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 29.5%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-16243
-
cpe:2.3:a:eclipse:omr:0.1.0
-
cpe:2.3:a:eclipse:omr:0.2
-
cpe:2.3:a:eclipse:omr:0.2.0
-
cpe:2.3:a:eclipse:omr:0.3
-
cpe:2.3:a:eclipse:omr:0.3.0
-
cpe:2.3:a:eclipse:omr:0.4
-
cpe:2.3:a:eclipse:omr:0.4.0
-
cpe:2.3:a:eclipse:omr:0.5.0
-
cpe:2.3:a:eclipse:omr:0.6.0
-
cpe:2.3:a:eclipse:omr:0.7.0
-
cpe:2.3:a:eclipse:omr:0.8.0