Eclipse OpenJ9 versions up to 0.60 and version 0.8.0 are vulnerable to a segmentation fault triggered by processing a specially crafted .class file with deeply nested annotations. The root cause is uncontrolled recursion (CWE-674) in the annotation handling code, which leads to a crash. This vulnerability has a CVSS 4.0 base score of 5.7, indicating a medium severity. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

Successful exploitation causes a segmentation fault, resulting in a denial of service by crashing the affected Eclipse OpenJ9 runtime. There is no indication of code execution or data corruption beyond the crash. The impact is limited to service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted or suspicious .class files with deeply nested annotations in affected versions.