Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
OpenJDK 11/17 ImageIO may crash on crafted files
published 22 days ago
Summary
The ImageIO part of OpenJDK 11 and OpenJDK 17 can be tricked by specially crafted image files, potentially causing the Java application to stop working or behave unexpectedly. This could affect any software that processes images using these Java versions. Apply the latest security updates for OpenJDK or upgrade to a newer, patched version to protect your systems.
What to do
- Update cleanstart openjdk11 to version 11.0.14_p9-r0.
- Update cleanstart openjdk17 to version 17.0.2_p8-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | openjdk11 |
< 11.0.14_p9-r0 Fix: upgrade to 11.0.14_p9-r0
|
| CleanStart | cleanstart | openjdk17 |
< 17.0.2_p8-r0 Fix: upgrade to 17.0.2_p8-r0
|
Original advisory text
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO)
CVE-2022-21360 affects multiple packages. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). See references for individual vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published14 Oct 2026
Updated14 Oct 2026
First seen14 Oct 2026
Sources
CLEANSTART-2026-WO05212 · OSV
Track software like this
Free during beta