A vulnerability (CVE-2025-30698) affects Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition in their 2D component. It allows an unauthenticated attacker with network access via multiple protocols to perform unauthorized read, update, insert, or delete operations on accessible data and cause partial denial of service. The vulnerability primarily impacts Java deployments running untrusted code in sandboxed environments such as Java Web Start applications or applets. It does not affect server deployments running only trusted code. The CVSS 3.1 base score is 5.6, indicating medium severity.