This Red Hat security advisory addresses vulnerabilities in IBM Java SE 8 by upgrading to version 8 SR8-FP40. The update fixes three CVEs: CVE-2025-21587, CVE-2025-30698, and CVE-2025-4447. The vulnerabilities relate to issues categorized under CWE-121 (Stack-based Buffer Overflow), CWE-208 (Information Exposure Through an Error Message), and CWE-122 (Heap-based Buffer Overflow). The advisory does not provide CVSS scores but classifies the impact as Important. The update is applicable to Red Hat Enterprise Linux 8 across multiple hardware platforms. The vendor advisory includes instructions to apply the update and references for further details. No known exploits in the wild have been reported at the time of publication.

The vulnerabilities fixed by this update potentially allow for memory corruption and information exposure issues within IBM Java SE 8. These could lead to application crashes or unintended disclosure of sensitive information. The advisory rates the impact as Important, indicating a significant security concern that should be addressed promptly. No evidence of active exploitation is reported.

A security update is available that upgrades IBM Java SE 8 to version 8 SR8-FP40, which addresses the identified vulnerabilities. Users should apply this update after confirming that all previously released relevant errata have been installed. Detailed instructions for applying the update are provided in the Red Hat advisory. No additional mitigation steps are indicated by the vendor.